# Flog Txt Version 1 # Analyzer Version: 2.3.2 # Analyzer Build Date: Nov 29 2018 14:58:43 # Log Creation Date: 04.01.2019 14:38:13.086 Process: id = "1" image_name = "%appdata%roamingmicrosoftwindowsstart menuprogramsstartup8gfg.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\%appdata%roamingmicrosoftwindowsstart menuprogramsstartup8gfg.exe" page_root = "0x3c01c000" os_pid = "0xaac" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\%APPDATA%roamingmicrosoftwindowsstart menuprogramsstartup8gfg.exe\" " cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000ea88" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 1 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 3 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 4 start_va = 0x150000 end_va = 0x18ffff entry_point = 0x0 region_type = private name = "private_0x0000000000150000" filename = "" Region: id = 5 start_va = 0x2f0000 end_va = 0x2f8fff entry_point = 0x2f0000 region_type = mapped_file name = "%appdata%roamingmicrosoftwindowsstart menuprogramsstartup8gfg.exe" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\%APPDATA%roamingmicrosoftwindowsstart menuprogramsstartup8gfg.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\%appdata%roamingmicrosoftwindowsstart menuprogramsstartup8gfg.exe") Region: id = 6 start_va = 0x360000 end_va = 0x45ffff entry_point = 0x0 region_type = private name = "private_0x0000000000360000" filename = "" Region: id = 7 start_va = 0x77670000 end_va = 0x77818fff entry_point = 0x77670000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 8 start_va = 0x77850000 end_va = 0x779cffff entry_point = 0x77850000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 9 start_va = 0x7efb0000 end_va = 0x7efd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 10 start_va = 0x7efdb000 end_va = 0x7efddfff entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 11 start_va = 0x7efde000 end_va = 0x7efdefff entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 12 start_va = 0x7efdf000 end_va = 0x7efdffff entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 13 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 14 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 15 start_va = 0x7fff0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 149 start_va = 0x50000 end_va = 0x53fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 150 start_va = 0x80000 end_va = 0xfffff entry_point = 0x0 region_type = private name = "private_0x0000000000080000" filename = "" Region: id = 151 start_va = 0x74d90000 end_va = 0x74d97fff entry_point = 0x74d90000 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 152 start_va = 0x74da0000 end_va = 0x74dfbfff entry_point = 0x74da0000 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 153 start_va = 0x74e00000 end_va = 0x74e3efff entry_point = 0x74e00000 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 154 start_va = 0x1b0000 end_va = 0x2affff entry_point = 0x0 region_type = private name = "private_0x00000000001b0000" filename = "" Region: id = 155 start_va = 0x75a20000 end_va = 0x75b2ffff entry_point = 0x75a20000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 156 start_va = 0x765f0000 end_va = 0x76635fff entry_point = 0x765f0000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 157 start_va = 0x77450000 end_va = 0x77549fff entry_point = 0x0 region_type = private name = "private_0x0000000077450000" filename = "" Region: id = 158 start_va = 0x77550000 end_va = 0x7766efff entry_point = 0x0 region_type = private name = "private_0x0000000077550000" filename = "" Region: id = 159 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 160 start_va = 0x460000 end_va = 0x4c6fff entry_point = 0x460000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 161 start_va = 0x75280000 end_va = 0x75291fff entry_point = 0x75280000 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\SysWOW64\\mpr.dll" (normalized: "c:\\windows\\syswow64\\mpr.dll") Region: id = 162 start_va = 0x753a0000 end_va = 0x753abfff entry_point = 0x753a0000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 163 start_va = 0x753b0000 end_va = 0x7540ffff entry_point = 0x753b0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 164 start_va = 0x75410000 end_va = 0x754acfff entry_point = 0x75410000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 165 start_va = 0x756f0000 end_va = 0x757effff entry_point = 0x756f0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 166 start_va = 0x75b30000 end_va = 0x75bcffff entry_point = 0x75b30000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 167 start_va = 0x75ce0000 end_va = 0x75d36fff entry_point = 0x75ce0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 168 start_va = 0x75e30000 end_va = 0x75edbfff entry_point = 0x75e30000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 169 start_va = 0x762b0000 end_va = 0x762c8fff entry_point = 0x762b0000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 170 start_va = 0x762d0000 end_va = 0x762d9fff entry_point = 0x762d0000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 171 start_va = 0x76670000 end_va = 0x772b9fff entry_point = 0x76670000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 172 start_va = 0x772d0000 end_va = 0x773bffff entry_point = 0x772d0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 173 start_va = 0x773c0000 end_va = 0x7744ffff entry_point = 0x773c0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 174 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 175 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 176 start_va = 0x530000 end_va = 0x53ffff entry_point = 0x0 region_type = private name = "private_0x0000000000530000" filename = "" Region: id = 177 start_va = 0x540000 end_va = 0x6c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000540000" filename = "" Region: id = 178 start_va = 0x75d40000 end_va = 0x75e0bfff entry_point = 0x75d40000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 179 start_va = 0x76500000 end_va = 0x7655ffff entry_point = 0x76500000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 180 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 181 start_va = 0x30000 end_va = 0x30fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 182 start_va = 0x6d0000 end_va = 0x850fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 183 start_va = 0x860000 end_va = 0x1c5ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000860000" filename = "" Region: id = 184 start_va = 0x75260000 end_va = 0x75275fff entry_point = 0x75260000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\SysWOW64\\cryptsp.dll" (normalized: "c:\\windows\\syswow64\\cryptsp.dll") Region: id = 185 start_va = 0x100000 end_va = 0x13bfff entry_point = 0x100000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 186 start_va = 0x100000 end_va = 0x13bfff entry_point = 0x100000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 187 start_va = 0x100000 end_va = 0x13bfff entry_point = 0x100000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 188 start_va = 0x100000 end_va = 0x13bfff entry_point = 0x100000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 189 start_va = 0x100000 end_va = 0x13bfff entry_point = 0x100000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 190 start_va = 0x75220000 end_va = 0x7525afff entry_point = 0x75220000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 191 start_va = 0x1c60000 end_va = 0x1f2efff entry_point = 0x1c60000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 192 start_va = 0x60000 end_va = 0x60fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 193 start_va = 0x75540000 end_va = 0x7569bfff entry_point = 0x75540000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 194 start_va = 0x74d00000 end_va = 0x74d7ffff entry_point = 0x74d00000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 195 start_va = 0x1f30000 end_va = 0x200ffff entry_point = 0x0 region_type = private name = "private_0x0000000001f30000" filename = "" Region: id = 196 start_va = 0x2010000 end_va = 0x20eefff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002010000" filename = "" Region: id = 197 start_va = 0x75120000 end_va = 0x75214fff entry_point = 0x75120000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\SysWOW64\\propsys.dll" (normalized: "c:\\windows\\syswow64\\propsys.dll") Region: id = 198 start_va = 0x75f60000 end_va = 0x75feefff entry_point = 0x75f60000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 199 start_va = 0x70000 end_va = 0x71fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000070000" filename = "" Region: id = 200 start_va = 0x74f80000 end_va = 0x7511dfff entry_point = 0x74f80000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll") Region: id = 201 start_va = 0x100000 end_va = 0x100fff entry_point = 0x100000 region_type = mapped_file name = "windowsshell.manifest" filename = "\\Windows\\WindowsShell.Manifest" (normalized: "c:\\windows\\windowsshell.manifest") Region: id = 202 start_va = 0x110000 end_va = 0x111fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 203 start_va = 0x100000 end_va = 0x100fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 204 start_va = 0x754b0000 end_va = 0x75532fff entry_point = 0x754b0000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll") Region: id = 205 start_va = 0x120000 end_va = 0x120fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 206 start_va = 0x74f50000 end_va = 0x74f70fff entry_point = 0x74f50000 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\SysWOW64\\ntmarta.dll" (normalized: "c:\\windows\\syswow64\\ntmarta.dll") Region: id = 207 start_va = 0x756a0000 end_va = 0x756e4fff entry_point = 0x756a0000 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\SysWOW64\\Wldap32.dll" (normalized: "c:\\windows\\syswow64\\wldap32.dll") Region: id = 208 start_va = 0x130000 end_va = 0x133fff entry_point = 0x130000 region_type = mapped_file name = "cversions.1.db" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db") Region: id = 209 start_va = 0x190000 end_va = 0x1aefff entry_point = 0x190000 region_type = mapped_file name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000016.db" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000016.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000016.db") Region: id = 210 start_va = 0x140000 end_va = 0x140fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 211 start_va = 0x20f0000 end_va = 0x21f0fff entry_point = 0x0 region_type = private name = "private_0x00000000020f0000" filename = "" Region: id = 212 start_va = 0x20f0000 end_va = 0x21f0fff entry_point = 0x0 region_type = private name = "private_0x00000000020f0000" filename = "" Region: id = 213 start_va = 0x20f0000 end_va = 0x21f0fff entry_point = 0x0 region_type = private name = "private_0x00000000020f0000" filename = "" Region: id = 214 start_va = 0x74f40000 end_va = 0x74f4afff entry_point = 0x74f40000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll") Region: id = 215 start_va = 0x130000 end_va = 0x133fff entry_point = 0x130000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 216 start_va = 0x2b0000 end_va = 0x2dffff entry_point = 0x2b0000 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000012.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000012.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000012.db") Region: id = 217 start_va = 0x2e0000 end_va = 0x2e3fff entry_point = 0x2e0000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 218 start_va = 0x1f30000 end_va = 0x1f95fff entry_point = 0x1f30000 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db") Region: id = 219 start_va = 0x1fd0000 end_va = 0x200ffff entry_point = 0x0 region_type = private name = "private_0x0000000001fd0000" filename = "" Region: id = 220 start_va = 0x2190000 end_va = 0x21cffff entry_point = 0x0 region_type = private name = "private_0x0000000002190000" filename = "" Region: id = 221 start_va = 0x21f0000 end_va = 0x22effff entry_point = 0x0 region_type = private name = "private_0x00000000021f0000" filename = "" Region: id = 222 start_va = 0x7efd8000 end_va = 0x7efdafff entry_point = 0x0 region_type = private name = "private_0x000000007efd8000" filename = "" Region: id = 223 start_va = 0x22f0000 end_va = 0x23f0fff entry_point = 0x0 region_type = private name = "private_0x00000000022f0000" filename = "" Region: id = 224 start_va = 0x75ff0000 end_va = 0x7618cfff entry_point = 0x75ff0000 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\SysWOW64\\setupapi.dll" (normalized: "c:\\windows\\syswow64\\setupapi.dll") Region: id = 225 start_va = 0x76640000 end_va = 0x76666fff entry_point = 0x76640000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll") Region: id = 226 start_va = 0x75e10000 end_va = 0x75e21fff entry_point = 0x75e10000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\SysWOW64\\devobj.dll" (normalized: "c:\\windows\\syswow64\\devobj.dll") Region: id = 227 start_va = 0x22f0000 end_va = 0x23f0fff entry_point = 0x0 region_type = private name = "private_0x00000000022f0000" filename = "" Region: id = 228 start_va = 0x22f0000 end_va = 0x23f0fff entry_point = 0x0 region_type = private name = "private_0x00000000022f0000" filename = "" Region: id = 229 start_va = 0x22f0000 end_va = 0x23f0fff entry_point = 0x0 region_type = private name = "private_0x00000000022f0000" filename = "" Region: id = 230 start_va = 0x300000 end_va = 0x306fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000300000" filename = "" Region: id = 231 start_va = 0x310000 end_va = 0x311fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000310000" filename = "" Region: id = 232 start_va = 0x22f0000 end_va = 0x26e2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000022f0000" filename = "" Region: id = 233 start_va = 0x26f0000 end_va = 0x27f0fff entry_point = 0x0 region_type = private name = "private_0x00000000026f0000" filename = "" Region: id = 234 start_va = 0x26f0000 end_va = 0x27f0fff entry_point = 0x0 region_type = private name = "private_0x00000000026f0000" filename = "" Region: id = 235 start_va = 0x26f0000 end_va = 0x27f0fff entry_point = 0x0 region_type = private name = "private_0x00000000026f0000" filename = "" Region: id = 236 start_va = 0x26f0000 end_va = 0x27f0fff entry_point = 0x0 region_type = private name = "private_0x00000000026f0000" filename = "" Region: id = 237 start_va = 0x26f0000 end_va = 0x27f0fff entry_point = 0x0 region_type = private name = "private_0x00000000026f0000" filename = "" Region: id = 238 start_va = 0x26f0000 end_va = 0x27f0fff entry_point = 0x0 region_type = private name = "private_0x00000000026f0000" filename = "" Region: id = 239 start_va = 0x26f0000 end_va = 0x27f0fff entry_point = 0x0 region_type = private name = "private_0x00000000026f0000" filename = "" Region: id = 240 start_va = 0x26f0000 end_va = 0x27f0fff entry_point = 0x0 region_type = private name = "private_0x00000000026f0000" filename = "" Region: id = 241 start_va = 0x26f0000 end_va = 0x27f0fff entry_point = 0x0 region_type = private name = "private_0x00000000026f0000" filename = "" Region: id = 242 start_va = 0x26f0000 end_va = 0x27f0fff entry_point = 0x0 region_type = private name = "private_0x00000000026f0000" filename = "" Region: id = 243 start_va = 0x26f0000 end_va = 0x27f0fff entry_point = 0x0 region_type = private name = "private_0x00000000026f0000" filename = "" Region: id = 244 start_va = 0x26f0000 end_va = 0x27f0fff entry_point = 0x0 region_type = private name = "private_0x00000000026f0000" filename = "" Region: id = 245 start_va = 0x26f0000 end_va = 0x27f0fff entry_point = 0x0 region_type = private name = "private_0x00000000026f0000" filename = "" Region: id = 246 start_va = 0x26f0000 end_va = 0x27f0fff entry_point = 0x0 region_type = private name = "private_0x00000000026f0000" filename = "" Region: id = 247 start_va = 0x26f0000 end_va = 0x27f0fff entry_point = 0x0 region_type = private name = "private_0x00000000026f0000" filename = "" Region: id = 248 start_va = 0x26f0000 end_va = 0x27f0fff entry_point = 0x0 region_type = private name = "private_0x00000000026f0000" filename = "" Region: id = 249 start_va = 0x26f0000 end_va = 0x27f0fff entry_point = 0x0 region_type = private name = "private_0x00000000026f0000" filename = "" Region: id = 250 start_va = 0x26f0000 end_va = 0x27f0fff entry_point = 0x0 region_type = private name = "private_0x00000000026f0000" filename = "" Region: id = 251 start_va = 0x26f0000 end_va = 0x27f0fff entry_point = 0x0 region_type = private name = "private_0x00000000026f0000" filename = "" Region: id = 252 start_va = 0x26f0000 end_va = 0x27f0fff entry_point = 0x0 region_type = private name = "private_0x00000000026f0000" filename = "" Region: id = 253 start_va = 0x26f0000 end_va = 0x27f0fff entry_point = 0x0 region_type = private name = "private_0x00000000026f0000" filename = "" Region: id = 254 start_va = 0x26f0000 end_va = 0x27f0fff entry_point = 0x0 region_type = private name = "private_0x00000000026f0000" filename = "" Region: id = 255 start_va = 0x26f0000 end_va = 0x27f0fff entry_point = 0x0 region_type = private name = "private_0x00000000026f0000" filename = "" Region: id = 256 start_va = 0x26f0000 end_va = 0x27f0fff entry_point = 0x0 region_type = private name = "private_0x00000000026f0000" filename = "" Region: id = 257 start_va = 0x26f0000 end_va = 0x27f0fff entry_point = 0x0 region_type = private name = "private_0x00000000026f0000" filename = "" Region: id = 258 start_va = 0x26f0000 end_va = 0x27f0fff entry_point = 0x0 region_type = private name = "private_0x00000000026f0000" filename = "" Region: id = 259 start_va = 0x26f0000 end_va = 0x27f0fff entry_point = 0x0 region_type = private name = "private_0x00000000026f0000" filename = "" Region: id = 260 start_va = 0x26f0000 end_va = 0x27f0fff entry_point = 0x0 region_type = private name = "private_0x00000000026f0000" filename = "" Region: id = 261 start_va = 0x26f0000 end_va = 0x27f0fff entry_point = 0x0 region_type = private name = "private_0x00000000026f0000" filename = "" Region: id = 262 start_va = 0x26f0000 end_va = 0x27f0fff entry_point = 0x0 region_type = private name = "private_0x00000000026f0000" filename = "" Region: id = 263 start_va = 0x26f0000 end_va = 0x27f0fff entry_point = 0x0 region_type = private name = "private_0x00000000026f0000" filename = "" Region: id = 264 start_va = 0x26f0000 end_va = 0x27f0fff entry_point = 0x0 region_type = private name = "private_0x00000000026f0000" filename = "" Region: id = 265 start_va = 0x26f0000 end_va = 0x27f0fff entry_point = 0x0 region_type = private name = "private_0x00000000026f0000" filename = "" Region: id = 266 start_va = 0x26f0000 end_va = 0x27f0fff entry_point = 0x0 region_type = private name = "private_0x00000000026f0000" filename = "" Region: id = 267 start_va = 0x26f0000 end_va = 0x27f0fff entry_point = 0x0 region_type = private name = "private_0x00000000026f0000" filename = "" Region: id = 268 start_va = 0x26f0000 end_va = 0x27f0fff entry_point = 0x0 region_type = private name = "private_0x00000000026f0000" filename = "" Region: id = 269 start_va = 0x26f0000 end_va = 0x27f0fff entry_point = 0x0 region_type = private name = "private_0x00000000026f0000" filename = "" Region: id = 270 start_va = 0x26f0000 end_va = 0x27f0fff entry_point = 0x0 region_type = private name = "private_0x00000000026f0000" filename = "" Region: id = 271 start_va = 0x26f0000 end_va = 0x27f0fff entry_point = 0x0 region_type = private name = "private_0x00000000026f0000" filename = "" Region: id = 272 start_va = 0x26f0000 end_va = 0x27f0fff entry_point = 0x0 region_type = private name = "private_0x00000000026f0000" filename = "" Region: id = 273 start_va = 0x74ef0000 end_va = 0x74f3bfff entry_point = 0x74ef0000 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\SysWOW64\\apphelp.dll" (normalized: "c:\\windows\\syswow64\\apphelp.dll") Region: id = 274 start_va = 0x74ec0000 end_va = 0x74eedfff entry_point = 0x74ec0000 region_type = mapped_file name = "shdocvw.dll" filename = "\\Windows\\SysWOW64\\shdocvw.dll" (normalized: "c:\\windows\\syswow64\\shdocvw.dll") Region: id = 275 start_va = 0x27a0000 end_va = 0x27dffff entry_point = 0x0 region_type = private name = "private_0x00000000027a0000" filename = "" Region: id = 276 start_va = 0x28c0000 end_va = 0x29bffff entry_point = 0x0 region_type = private name = "private_0x00000000028c0000" filename = "" Region: id = 277 start_va = 0x7efd5000 end_va = 0x7efd7fff entry_point = 0x0 region_type = private name = "private_0x000000007efd5000" filename = "" Region: id = 278 start_va = 0x762e0000 end_va = 0x76415fff entry_point = 0x762e0000 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\SysWOW64\\urlmon.dll" (normalized: "c:\\windows\\syswow64\\urlmon.dll") Region: id = 279 start_va = 0x75be0000 end_va = 0x75cd4fff entry_point = 0x75be0000 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\SysWOW64\\wininet.dll" (normalized: "c:\\windows\\syswow64\\wininet.dll") Region: id = 280 start_va = 0x757f0000 end_va = 0x759eafff entry_point = 0x757f0000 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\SysWOW64\\iertutil.dll" (normalized: "c:\\windows\\syswow64\\iertutil.dll") Region: id = 281 start_va = 0x76190000 end_va = 0x762acfff entry_point = 0x76190000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\SysWOW64\\crypt32.dll" (normalized: "c:\\windows\\syswow64\\crypt32.dll") Region: id = 282 start_va = 0x772c0000 end_va = 0x772cbfff entry_point = 0x772c0000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\SysWOW64\\msasn1.dll" (normalized: "c:\\windows\\syswow64\\msasn1.dll") Region: id = 283 start_va = 0x320000 end_va = 0x320fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000320000" filename = "" Region: id = 284 start_va = 0x4f0000 end_va = 0x52ffff entry_point = 0x0 region_type = private name = "private_0x00000000004f0000" filename = "" Region: id = 285 start_va = 0x2a80000 end_va = 0x2b7ffff entry_point = 0x0 region_type = private name = "private_0x0000000002a80000" filename = "" Region: id = 286 start_va = 0x7efad000 end_va = 0x7efaffff entry_point = 0x0 region_type = private name = "private_0x000000007efad000" filename = "" Thread: id = 1 os_tid = 0xab0 [0119.956] GetUserDefaultLangID () returned 0x409 [0119.958] GetModuleHandleA (lpModuleName=0x0) returned 0x2f0000 [0119.958] FindResourceW (hModule=0x2f0000, lpName=0x1, lpType=0xa) returned 0x2f7048 [0119.960] LoadResource (hModule=0x2f0000, hResInfo=0x2f7048) returned 0x2f7058 [0119.960] SizeofResource (hModule=0x2f0000, hResInfo=0x2f7048) returned 0x1da [0119.961] RegOpenKeyW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Policies\\Microsoft\\Windows Defender", phkResult=0x45ff34 | out: phkResult=0x45ff34*=0x0) returned 0x2 [0119.961] CryptAcquireContextW (in: phProv=0x45ff30, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x45ff30*=0x1c5000) returned 1 [0120.287] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x45f8b4, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\%APPDATA%roamingmicrosoftwindowsstart menuprogramsstartup8gfg.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\%appdata%roamingmicrosoftwindowsstart menuprogramsstartup8gfg.exe")) returned 0x67 [0120.287] lstrcpyW (in: lpString1=0x45fabc, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\%APPDATA%roamingmicrosoftwindowsstart menuprogramsstartup8gfg.exe" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\%APPDATA%roamingmicrosoftwindowsstart menuprogramsstartup8gfg.exe") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\%APPDATA%roamingmicrosoftwindowsstart menuprogramsstartup8gfg.exe" [0120.287] PathRemoveFileSpecW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\%APPDATA%roamingmicrosoftwindowsstart menuprogramsstartup8gfg.exe" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1 [0120.287] ExpandEnvironmentStringsW (in: lpSrc="%appdata%", lpDst=0x45fcc4, nSize=0x104 | out: lpDst="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x2e [0120.287] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpString2="\\Microsoft\\Windows\\Start Menu\\Programs\\Startup" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup" [0120.287] CryptGenRandom (in: hProv=0x1c5000, dwLen=0x4, pbBuffer=0x45ff10 | out: pbBuffer=0x45ff10) returned 1 [0120.287] CryptGenRandom (in: hProv=0x1c5000, dwLen=0x1, pbBuffer=0x45ff17 | out: pbBuffer=0x45ff17) returned 1 [0120.287] CryptGenRandom (in: hProv=0x1c5000, dwLen=0x1, pbBuffer=0x45ff17 | out: pbBuffer=0x45ff17) returned 1 [0120.287] CryptGenRandom (in: hProv=0x1c5000, dwLen=0x1, pbBuffer=0x45ff17 | out: pbBuffer=0x45ff17) returned 1 [0120.287] CryptGenRandom (in: hProv=0x1c5000, dwLen=0x1, pbBuffer=0x45ff17 | out: pbBuffer=0x45ff17) returned 1 [0120.287] CryptGenRandom (in: hProv=0x1c5000, dwLen=0x1, pbBuffer=0x45ff17 | out: pbBuffer=0x45ff17) returned 1 [0120.287] CryptGenRandom (in: hProv=0x1c5000, dwLen=0x1, pbBuffer=0x45ff17 | out: pbBuffer=0x45ff17) returned 1 [0120.288] CryptGenRandom (in: hProv=0x1c5000, dwLen=0x1, pbBuffer=0x45ff17 | out: pbBuffer=0x45ff17) returned 1 [0120.288] CryptGenRandom (in: hProv=0x1c5000, dwLen=0x1, pbBuffer=0x45ff17 | out: pbBuffer=0x45ff17) returned 1 [0120.288] CryptGenRandom (in: hProv=0x1c5000, dwLen=0x1, pbBuffer=0x45ff17 | out: pbBuffer=0x45ff17) returned 1 [0120.288] CryptGenRandom (in: hProv=0x1c5000, dwLen=0x1, pbBuffer=0x45ff17 | out: pbBuffer=0x45ff17) returned 1 [0120.288] CryptGenRandom (in: hProv=0x1c5000, dwLen=0x1, pbBuffer=0x45ff17 | out: pbBuffer=0x45ff17) returned 1 [0120.288] CryptGenRandom (in: hProv=0x1c5000, dwLen=0x1, pbBuffer=0x45ff17 | out: pbBuffer=0x45ff17) returned 1 [0120.288] CryptGenRandom (in: hProv=0x1c5000, dwLen=0x1, pbBuffer=0x45ff17 | out: pbBuffer=0x45ff17) returned 1 [0120.288] CryptGenRandom (in: hProv=0x1c5000, dwLen=0x1, pbBuffer=0x45ff17 | out: pbBuffer=0x45ff17) returned 1 [0120.288] PathAddBackslashW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\") returned="" [0120.288] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\", lpString2="YFeKw5dmGYVjgc" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\YFeKw5dmGYVjgc") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\YFeKw5dmGYVjgc" [0120.288] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\YFeKw5dmGYVjgc", lpString2=".exe" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\YFeKw5dmGYVjgc.exe") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\YFeKw5dmGYVjgc.exe" [0120.288] CopyFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\%APPDATA%roamingmicrosoftwindowsstart menuprogramsstartup8gfg.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\%appdata%roamingmicrosoftwindowsstart menuprogramsstartup8gfg.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\YFeKw5dmGYVjgc.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\yfekw5dmgyvjgc.exe"), bFailIfExists=0) returned 1 [0120.296] ShellExecuteW (hwnd=0x0, lpOperation="open", lpFile="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\YFeKw5dmGYVjgc.exe", lpParameters=0x0, lpDirectory=0x0, nShowCmd=5) returned 0x2a [0126.416] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x45f79c, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\%APPDATA%roamingmicrosoftwindowsstart menuprogramsstartup8gfg.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\%appdata%roamingmicrosoftwindowsstart menuprogramsstartup8gfg.exe")) returned 0x67 [0126.417] wnsprintfA (in: pszDest=0x222dc0, cchDest=306, pszFmt=":d\r\ndel \"%s\"\r\nif exist \"%s\" goto d" | out: pszDest=":d\r\ndel \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\%APPDATA%roamingmicrosoftwindowsstart menuprogramsstartup8gfg.exe\"\r\nif exist \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\%APPDATA%roamingmicrosoftwindowsstart menuprogramsstartup8gfg.exe\" goto d") returned 236 [0126.417] ExpandEnvironmentStringsW (in: lpSrc="%temp%", lpDst=0x45f300, nSize=0x104 | out: lpDst="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp") returned 0x25 [0126.417] GetTempFileNameW (in: lpPathName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", lpPrefixString="", uUnique=0x0, lpTempFileName=0x45f50c | out: lpTempFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\1296.tmp" (normalized: "c:\\users\\5p5nrg~1\\appdata\\local\\temp\\1296.tmp")) returned 0x1296 [0126.419] lstrcatW (in: lpString1="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\1296.tmp", lpString2=".bat" | out: lpString1="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\1296.tmp.bat") returned="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\1296.tmp.bat" [0126.419] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\1296.tmp.bat", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 50 [0126.419] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\1296.tmp.bat", cchWideChar=-1, lpMultiByteStr=0x1fdbb8, cbMultiByte=50, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\1296.tmp.bat", lpUsedDefaultChar=0x0) returned 50 [0126.419] wnsprintfA (in: pszDest=0x1d8f90, cchDest=313, pszFmt="@echo off\r\n%s\r\ndel /F \"%s\"\r\n" | out: pszDest="@echo off\r\n:d\r\ndel \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\%APPDATA%roamingmicrosoftwindowsstart menuprogramsstartup8gfg.exe\"\r\nif exist \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\%APPDATA%roamingmicrosoftwindowsstart menuprogramsstartup8gfg.exe\" goto d\r\ndel /F \"C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\1296.tmp.bat\"\r\n") returned 309 [0126.419] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\1296.tmp.bat" (normalized: "c:\\users\\5p5nrg~1\\appdata\\local\\temp\\1296.tmp.bat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x268 [0126.419] WriteFile (in: hFile=0x268, lpBuffer=0x1d8f90*, nNumberOfBytesToWrite=0x135, lpNumberOfBytesWritten=0x45f768, lpOverlapped=0x0 | out: lpBuffer=0x1d8f90*, lpNumberOfBytesWritten=0x45f768*=0x135, lpOverlapped=0x0) returned 1 [0126.420] CloseHandle (hObject=0x268) returned 1 [0126.425] wnsprintfW (in: pszDest=0x45f2f8, cchDest=265, pszFmt="/c \"%s\"" | out: pszDest="/c \"C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\1296.tmp.bat\"") returned 54 [0126.425] ExpandEnvironmentStringsW (in: lpSrc="%ComSpec%", lpDst=0x45f50c, nSize=0x104 | out: lpDst="C:\\Windows\\system32\\cmd.exe") returned 0x1c [0126.425] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine="/c \"C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\1296.tmp.bat\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x45f714*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x45f758 | out: lpCommandLine="/c \"C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\1296.tmp.bat\"", lpProcessInformation=0x45f758*(hProcess=0x258, hThread=0x268, dwProcessId=0xad0, dwThreadId=0xad4)) returned 1 [0126.502] ExitProcess (uExitCode=0x0) Thread: id = 2 os_tid = 0x0 Thread: id = 3 os_tid = 0xabc Thread: id = 4 os_tid = 0xac0 Thread: id = 5 os_tid = 0xac4 Process: id = "2" image_name = "yfekw5dmgyvjgc.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\yfekw5dmgyvjgc.exe" page_root = "0x3b5cb000" os_pid = "0xac8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0xaac" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\YFeKw5dmGYVjgc.exe\" " cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000ea88" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 287 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 288 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 289 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 290 start_va = 0x50000 end_va = 0x53fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 291 start_va = 0x80000 end_va = 0x88fff entry_point = 0x80000 region_type = mapped_file name = "yfekw5dmgyvjgc.exe" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\YFeKw5dmGYVjgc.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\yfekw5dmgyvjgc.exe") Region: id = 292 start_va = 0xb0000 end_va = 0xeffff entry_point = 0x0 region_type = private name = "private_0x00000000000b0000" filename = "" Region: id = 293 start_va = 0x2b0000 end_va = 0x3affff entry_point = 0x0 region_type = private name = "private_0x00000000002b0000" filename = "" Region: id = 294 start_va = 0x77670000 end_va = 0x77818fff entry_point = 0x77670000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 295 start_va = 0x77850000 end_va = 0x779cffff entry_point = 0x77850000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 296 start_va = 0x7efb0000 end_va = 0x7efd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 297 start_va = 0x7efdb000 end_va = 0x7efddfff entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 298 start_va = 0x7efde000 end_va = 0x7efdefff entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 299 start_va = 0x7efdf000 end_va = 0x7efdffff entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 300 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 301 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 302 start_va = 0x7fff0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 303 start_va = 0x1f0000 end_va = 0x26ffff entry_point = 0x0 region_type = private name = "private_0x00000000001f0000" filename = "" Region: id = 304 start_va = 0x74d90000 end_va = 0x74d97fff entry_point = 0x74d90000 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 305 start_va = 0x74da0000 end_va = 0x74dfbfff entry_point = 0x74da0000 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 306 start_va = 0x74e00000 end_va = 0x74e3efff entry_point = 0x74e00000 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 307 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 308 start_va = 0xf0000 end_va = 0x156fff entry_point = 0xf0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 309 start_va = 0x4b0000 end_va = 0x5affff entry_point = 0x0 region_type = private name = "private_0x00000000004b0000" filename = "" Region: id = 310 start_va = 0x7a0000 end_va = 0x7affff entry_point = 0x0 region_type = private name = "private_0x00000000007a0000" filename = "" Region: id = 311 start_va = 0x75280000 end_va = 0x75291fff entry_point = 0x75280000 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\SysWOW64\\mpr.dll" (normalized: "c:\\windows\\syswow64\\mpr.dll") Region: id = 312 start_va = 0x753a0000 end_va = 0x753abfff entry_point = 0x753a0000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 313 start_va = 0x753b0000 end_va = 0x7540ffff entry_point = 0x753b0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 314 start_va = 0x75410000 end_va = 0x754acfff entry_point = 0x75410000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 315 start_va = 0x756f0000 end_va = 0x757effff entry_point = 0x756f0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 316 start_va = 0x75a20000 end_va = 0x75b2ffff entry_point = 0x75a20000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 317 start_va = 0x75b30000 end_va = 0x75bcffff entry_point = 0x75b30000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 318 start_va = 0x75ce0000 end_va = 0x75d36fff entry_point = 0x75ce0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 319 start_va = 0x75e30000 end_va = 0x75edbfff entry_point = 0x75e30000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 320 start_va = 0x762b0000 end_va = 0x762c8fff entry_point = 0x762b0000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 321 start_va = 0x762d0000 end_va = 0x762d9fff entry_point = 0x762d0000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 322 start_va = 0x765f0000 end_va = 0x76635fff entry_point = 0x765f0000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 323 start_va = 0x76670000 end_va = 0x772b9fff entry_point = 0x76670000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 324 start_va = 0x772d0000 end_va = 0x773bffff entry_point = 0x772d0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 325 start_va = 0x773c0000 end_va = 0x7744ffff entry_point = 0x773c0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 326 start_va = 0x77450000 end_va = 0x77549fff entry_point = 0x0 region_type = private name = "private_0x0000000077450000" filename = "" Region: id = 327 start_va = 0x77550000 end_va = 0x7766efff entry_point = 0x0 region_type = private name = "private_0x0000000077550000" filename = "" Region: id = 328 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 329 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 330 start_va = 0x5b0000 end_va = 0x737fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005b0000" filename = "" Region: id = 331 start_va = 0x75d40000 end_va = 0x75e0bfff entry_point = 0x75d40000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 332 start_va = 0x76500000 end_va = 0x7655ffff entry_point = 0x76500000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 333 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 334 start_va = 0x30000 end_va = 0x30fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 335 start_va = 0x7b0000 end_va = 0x930fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007b0000" filename = "" Region: id = 336 start_va = 0x940000 end_va = 0x1d3ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000940000" filename = "" Region: id = 354 start_va = 0x75240000 end_va = 0x75255fff entry_point = 0x75240000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\SysWOW64\\cryptsp.dll" (normalized: "c:\\windows\\syswow64\\cryptsp.dll") Region: id = 355 start_va = 0x160000 end_va = 0x19bfff entry_point = 0x160000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 356 start_va = 0x160000 end_va = 0x19bfff entry_point = 0x160000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 357 start_va = 0x160000 end_va = 0x19bfff entry_point = 0x160000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 358 start_va = 0x160000 end_va = 0x19bfff entry_point = 0x160000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 359 start_va = 0x160000 end_va = 0x19bfff entry_point = 0x160000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 360 start_va = 0x75200000 end_va = 0x7523afff entry_point = 0x75200000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 365 start_va = 0x60000 end_va = 0x6ffff entry_point = 0x0 region_type = private name = "private_0x0000000000060000" filename = "" Region: id = 366 start_va = 0x70000 end_va = 0x77fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000070000" filename = "" Region: id = 367 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 368 start_va = 0x1d40000 end_va = 0x200efff entry_point = 0x1d40000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 369 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 370 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 371 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 372 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 373 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 374 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 375 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 376 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 377 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 378 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 392 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 393 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 394 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 395 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 396 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 397 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 398 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 399 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 400 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 401 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 402 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 403 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 404 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 405 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 406 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 407 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 408 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 409 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 410 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 411 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 412 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 413 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 414 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 415 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 416 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 417 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 418 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 419 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 420 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 421 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 422 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 423 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 424 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 425 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 426 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 427 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 428 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 429 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 430 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 431 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 432 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 436 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 437 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 438 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 439 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 440 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 441 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 442 start_va = 0x60000 end_va = 0x67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 443 start_va = 0x2080000 end_va = 0x20bffff entry_point = 0x0 region_type = private name = "private_0x0000000002080000" filename = "" Region: id = 444 start_va = 0x2110000 end_va = 0x220ffff entry_point = 0x0 region_type = private name = "private_0x0000000002110000" filename = "" Region: id = 445 start_va = 0x7efd8000 end_va = 0x7efdafff entry_point = 0x0 region_type = private name = "private_0x000000007efd8000" filename = "" Region: id = 446 start_va = 0x60000 end_va = 0x60fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 447 start_va = 0x75540000 end_va = 0x7569bfff entry_point = 0x75540000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 448 start_va = 0x270000 end_va = 0x2affff entry_point = 0x0 region_type = private name = "private_0x0000000000270000" filename = "" Region: id = 449 start_va = 0x23c0000 end_va = 0x24bffff entry_point = 0x0 region_type = private name = "private_0x00000000023c0000" filename = "" Region: id = 450 start_va = 0x7efd5000 end_va = 0x7efd7fff entry_point = 0x0 region_type = private name = "private_0x000000007efd5000" filename = "" Thread: id = 6 os_tid = 0xacc [0126.501] GetUserDefaultLangID () returned 0x409 [0126.510] GetModuleHandleA (lpModuleName=0x0) returned 0x80000 [0126.510] FindResourceW (hModule=0x80000, lpName=0x1, lpType=0xa) returned 0x87048 [0126.770] LoadResource (hModule=0x80000, hResInfo=0x87048) returned 0x87058 [0126.770] SizeofResource (hModule=0x80000, hResInfo=0x87048) returned 0x1da [0126.770] RegOpenKeyW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Policies\\Microsoft\\Windows Defender", phkResult=0x3aff24 | out: phkResult=0x3aff24*=0x0) returned 0x2 [0126.770] CryptAcquireContextW (in: phProv=0x3aff20, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x3aff20*=0x4c50f8) returned 1 [0126.792] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x3af8a4, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\YFeKw5dmGYVjgc.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\yfekw5dmgyvjgc.exe")) returned 0x6e [0126.792] lstrcpyW (in: lpString1=0x3afaac, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\YFeKw5dmGYVjgc.exe" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\YFeKw5dmGYVjgc.exe") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\YFeKw5dmGYVjgc.exe" [0126.792] PathRemoveFileSpecW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\YFeKw5dmGYVjgc.exe" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned 1 [0126.792] ExpandEnvironmentStringsW (in: lpSrc="%appdata%", lpDst=0x3afcb4, nSize=0x104 | out: lpDst="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x2e [0126.792] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpString2="\\Microsoft\\Windows\\Start Menu\\Programs\\Startup" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup" [0126.792] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x3afefc | out: TokenHandle=0x3afefc*=0x84) returned 1 [0126.792] GetTokenInformation (in: TokenHandle=0x84, TokenInformationClass=0x14, TokenInformation=0x3afef4, TokenInformationLength=0x4, ReturnLength=0x3afef8 | out: TokenInformation=0x3afef4, ReturnLength=0x3afef8) returned 1 [0126.792] CloseHandle (hObject=0x84) returned 1 [0126.793] CreateProcessW (in: lpApplicationName="C:\\Windows\\sysnative\\vssadmin.exe", lpCommandLine=" delete shadows /all /quiet", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x3afeb8*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x3afefc | out: lpCommandLine=" delete shadows /all /quiet", lpProcessInformation=0x3afefc*(hProcess=0x88, hThread=0x84, dwProcessId=0xae4, dwThreadId=0xae8)) returned 1 [0126.884] CloseHandle (hObject=0x84) returned 1 [0126.884] CloseHandle (hObject=0x88) returned 1 [0126.884] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x88 [0126.887] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0126.888] StrCmpNW (lpStr1="[Syst", lpStr2="mysql", nChar=5) returned -1 [0126.890] StrCmpNW (lpStr1="[Sy", lpStr2="IBM", nChar=3) returned -1 [0126.890] StrCmpNW (lpStr1="[Syst", lpStr2="bes10", nChar=5) returned -1 [0126.890] StrCmpNW (lpStr1="[Syst", lpStr2="black", nChar=5) returned -1 [0126.890] StrCmpNW (lpStr1="[Sy", lpStr2="sql", nChar=3) returned -1 [0126.890] StrCmpNW (lpStr1="[System P", lpStr2="store.exe", nChar=9) returned -1 [0126.890] StrCmpNW (lpStr1="[Sy", lpStr2="vee", nChar=3) returned -1 [0126.890] StrCmpNW (lpStr1="[Syst", lpStr2="postg", nChar=5) returned -1 [0126.890] StrCmpNW (lpStr1="[Sys", lpStr2="sage", nChar=4) returned -1 [0126.890] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0126.891] StrCmpNW (lpStr1="Syste", lpStr2="mysql", nChar=5) returned 1 [0126.891] StrCmpNW (lpStr1="Sys", lpStr2="IBM", nChar=3) returned 1 [0126.891] StrCmpNW (lpStr1="Syste", lpStr2="bes10", nChar=5) returned 1 [0126.891] StrCmpNW (lpStr1="Syste", lpStr2="black", nChar=5) returned 1 [0126.891] StrCmpNW (lpStr1="Sys", lpStr2="sql", nChar=3) returned 1 [0126.891] StrCmpNW (lpStr1="System", lpStr2="store.exe", nChar=9) returned 1 [0126.891] StrCmpNW (lpStr1="Sys", lpStr2="vee", nChar=3) returned -1 [0126.891] StrCmpNW (lpStr1="Syste", lpStr2="postg", nChar=5) returned 1 [0126.891] StrCmpNW (lpStr1="Syst", lpStr2="sage", nChar=4) returned 1 [0126.891] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0126.892] StrCmpNW (lpStr1="smss.", lpStr2="mysql", nChar=5) returned 1 [0126.892] StrCmpNW (lpStr1="sms", lpStr2="IBM", nChar=3) returned 1 [0126.892] StrCmpNW (lpStr1="smss.", lpStr2="bes10", nChar=5) returned 1 [0126.892] StrCmpNW (lpStr1="smss.", lpStr2="black", nChar=5) returned 1 [0126.892] StrCmpNW (lpStr1="sms", lpStr2="sql", nChar=3) returned -1 [0126.892] StrCmpNW (lpStr1="smss.exe", lpStr2="store.exe", nChar=9) returned -1 [0126.892] StrCmpNW (lpStr1="sms", lpStr2="vee", nChar=3) returned -1 [0126.893] StrCmpNW (lpStr1="smss.", lpStr2="postg", nChar=5) returned 1 [0126.893] StrCmpNW (lpStr1="smss", lpStr2="sage", nChar=4) returned 1 [0126.893] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0126.893] StrCmpNW (lpStr1="csrss", lpStr2="mysql", nChar=5) returned -1 [0126.893] StrCmpNW (lpStr1="csr", lpStr2="IBM", nChar=3) returned -1 [0126.893] StrCmpNW (lpStr1="csrss", lpStr2="bes10", nChar=5) returned 1 [0126.894] StrCmpNW (lpStr1="csrss", lpStr2="black", nChar=5) returned 1 [0126.894] StrCmpNW (lpStr1="csr", lpStr2="sql", nChar=3) returned -1 [0126.894] StrCmpNW (lpStr1="csrss.exe", lpStr2="store.exe", nChar=9) returned -1 [0126.894] StrCmpNW (lpStr1="csr", lpStr2="vee", nChar=3) returned -1 [0126.894] StrCmpNW (lpStr1="csrss", lpStr2="postg", nChar=5) returned -1 [0126.894] StrCmpNW (lpStr1="csrs", lpStr2="sage", nChar=4) returned -1 [0126.894] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0126.895] StrCmpNW (lpStr1="winin", lpStr2="mysql", nChar=5) returned 1 [0126.895] StrCmpNW (lpStr1="win", lpStr2="IBM", nChar=3) returned 1 [0126.895] StrCmpNW (lpStr1="winin", lpStr2="bes10", nChar=5) returned 1 [0126.895] StrCmpNW (lpStr1="winin", lpStr2="black", nChar=5) returned 1 [0126.895] StrCmpNW (lpStr1="win", lpStr2="sql", nChar=3) returned 1 [0126.895] StrCmpNW (lpStr1="wininit.e", lpStr2="store.exe", nChar=9) returned 1 [0126.895] StrCmpNW (lpStr1="win", lpStr2="vee", nChar=3) returned 1 [0126.895] StrCmpNW (lpStr1="winin", lpStr2="postg", nChar=5) returned 1 [0126.895] StrCmpNW (lpStr1="wini", lpStr2="sage", nChar=4) returned 1 [0126.895] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0126.896] StrCmpNW (lpStr1="csrss", lpStr2="mysql", nChar=5) returned -1 [0126.896] StrCmpNW (lpStr1="csr", lpStr2="IBM", nChar=3) returned -1 [0126.896] StrCmpNW (lpStr1="csrss", lpStr2="bes10", nChar=5) returned 1 [0126.896] StrCmpNW (lpStr1="csrss", lpStr2="black", nChar=5) returned 1 [0126.896] StrCmpNW (lpStr1="csr", lpStr2="sql", nChar=3) returned -1 [0126.896] StrCmpNW (lpStr1="csrss.exe", lpStr2="store.exe", nChar=9) returned -1 [0126.896] StrCmpNW (lpStr1="csr", lpStr2="vee", nChar=3) returned -1 [0126.896] StrCmpNW (lpStr1="csrss", lpStr2="postg", nChar=5) returned -1 [0126.896] StrCmpNW (lpStr1="csrs", lpStr2="sage", nChar=4) returned -1 [0126.897] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0126.897] StrCmpNW (lpStr1="winlo", lpStr2="mysql", nChar=5) returned 1 [0126.897] StrCmpNW (lpStr1="win", lpStr2="IBM", nChar=3) returned 1 [0126.897] StrCmpNW (lpStr1="winlo", lpStr2="bes10", nChar=5) returned 1 [0126.897] StrCmpNW (lpStr1="winlo", lpStr2="black", nChar=5) returned 1 [0126.897] StrCmpNW (lpStr1="win", lpStr2="sql", nChar=3) returned 1 [0126.898] StrCmpNW (lpStr1="winlogon.", lpStr2="store.exe", nChar=9) returned 1 [0126.898] StrCmpNW (lpStr1="win", lpStr2="vee", nChar=3) returned 1 [0126.898] StrCmpNW (lpStr1="winlo", lpStr2="postg", nChar=5) returned 1 [0126.898] StrCmpNW (lpStr1="winl", lpStr2="sage", nChar=4) returned 1 [0126.898] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0126.898] StrCmpNW (lpStr1="servi", lpStr2="mysql", nChar=5) returned 1 [0126.898] StrCmpNW (lpStr1="ser", lpStr2="IBM", nChar=3) returned 1 [0126.899] StrCmpNW (lpStr1="servi", lpStr2="bes10", nChar=5) returned 1 [0126.899] StrCmpNW (lpStr1="servi", lpStr2="black", nChar=5) returned 1 [0126.899] StrCmpNW (lpStr1="ser", lpStr2="sql", nChar=3) returned -1 [0126.899] StrCmpNW (lpStr1="services.", lpStr2="store.exe", nChar=9) returned -1 [0126.899] StrCmpNW (lpStr1="ser", lpStr2="vee", nChar=3) returned -1 [0126.899] StrCmpNW (lpStr1="servi", lpStr2="postg", nChar=5) returned 1 [0126.899] StrCmpNW (lpStr1="serv", lpStr2="sage", nChar=4) returned 1 [0126.899] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0126.899] StrCmpNW (lpStr1="lsass", lpStr2="mysql", nChar=5) returned -1 [0126.899] StrCmpNW (lpStr1="lsa", lpStr2="IBM", nChar=3) returned 1 [0126.899] StrCmpNW (lpStr1="lsass", lpStr2="bes10", nChar=5) returned 1 [0126.900] StrCmpNW (lpStr1="lsass", lpStr2="black", nChar=5) returned 1 [0126.900] StrCmpNW (lpStr1="lsa", lpStr2="sql", nChar=3) returned -1 [0126.900] StrCmpNW (lpStr1="lsass.exe", lpStr2="store.exe", nChar=9) returned -1 [0126.900] StrCmpNW (lpStr1="lsa", lpStr2="vee", nChar=3) returned -1 [0126.900] StrCmpNW (lpStr1="lsass", lpStr2="postg", nChar=5) returned -1 [0126.900] StrCmpNW (lpStr1="lsas", lpStr2="sage", nChar=4) returned -1 [0126.900] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0126.900] StrCmpNW (lpStr1="lsm.e", lpStr2="mysql", nChar=5) returned -1 [0126.900] StrCmpNW (lpStr1="lsm", lpStr2="IBM", nChar=3) returned 1 [0126.900] StrCmpNW (lpStr1="lsm.e", lpStr2="bes10", nChar=5) returned 1 [0126.901] StrCmpNW (lpStr1="lsm.e", lpStr2="black", nChar=5) returned 1 [0126.901] StrCmpNW (lpStr1="lsm", lpStr2="sql", nChar=3) returned -1 [0126.901] StrCmpNW (lpStr1="lsm.exe", lpStr2="store.exe", nChar=9) returned -1 [0126.901] StrCmpNW (lpStr1="lsm", lpStr2="vee", nChar=3) returned -1 [0126.901] StrCmpNW (lpStr1="lsm.e", lpStr2="postg", nChar=5) returned -1 [0126.901] StrCmpNW (lpStr1="lsm.", lpStr2="sage", nChar=4) returned -1 [0126.901] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.080] StrCmpNW (lpStr1="svcho", lpStr2="mysql", nChar=5) returned 1 [0127.080] StrCmpNW (lpStr1="svc", lpStr2="IBM", nChar=3) returned 1 [0127.080] StrCmpNW (lpStr1="svcho", lpStr2="bes10", nChar=5) returned 1 [0127.080] StrCmpNW (lpStr1="svcho", lpStr2="black", nChar=5) returned 1 [0127.080] StrCmpNW (lpStr1="svc", lpStr2="sql", nChar=3) returned 1 [0127.080] StrCmpNW (lpStr1="svchost.e", lpStr2="store.exe", nChar=9) returned 1 [0127.080] StrCmpNW (lpStr1="svc", lpStr2="vee", nChar=3) returned -1 [0127.080] StrCmpNW (lpStr1="svcho", lpStr2="postg", nChar=5) returned 1 [0127.080] StrCmpNW (lpStr1="svch", lpStr2="sage", nChar=4) returned 1 [0127.080] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.081] StrCmpNW (lpStr1="svcho", lpStr2="mysql", nChar=5) returned 1 [0127.081] StrCmpNW (lpStr1="svc", lpStr2="IBM", nChar=3) returned 1 [0127.081] StrCmpNW (lpStr1="svcho", lpStr2="bes10", nChar=5) returned 1 [0127.081] StrCmpNW (lpStr1="svcho", lpStr2="black", nChar=5) returned 1 [0127.081] StrCmpNW (lpStr1="svc", lpStr2="sql", nChar=3) returned 1 [0127.081] StrCmpNW (lpStr1="svchost.e", lpStr2="store.exe", nChar=9) returned 1 [0127.081] StrCmpNW (lpStr1="svc", lpStr2="vee", nChar=3) returned -1 [0127.081] StrCmpNW (lpStr1="svcho", lpStr2="postg", nChar=5) returned 1 [0127.081] StrCmpNW (lpStr1="svch", lpStr2="sage", nChar=4) returned 1 [0127.081] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.082] StrCmpNW (lpStr1="svcho", lpStr2="mysql", nChar=5) returned 1 [0127.082] StrCmpNW (lpStr1="svc", lpStr2="IBM", nChar=3) returned 1 [0127.082] StrCmpNW (lpStr1="svcho", lpStr2="bes10", nChar=5) returned 1 [0127.082] StrCmpNW (lpStr1="svcho", lpStr2="black", nChar=5) returned 1 [0127.082] StrCmpNW (lpStr1="svc", lpStr2="sql", nChar=3) returned 1 [0127.082] StrCmpNW (lpStr1="svchost.e", lpStr2="store.exe", nChar=9) returned 1 [0127.082] StrCmpNW (lpStr1="svc", lpStr2="vee", nChar=3) returned -1 [0127.082] StrCmpNW (lpStr1="svcho", lpStr2="postg", nChar=5) returned 1 [0127.082] StrCmpNW (lpStr1="svch", lpStr2="sage", nChar=4) returned 1 [0127.082] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.083] StrCmpNW (lpStr1="svcho", lpStr2="mysql", nChar=5) returned 1 [0127.083] StrCmpNW (lpStr1="svc", lpStr2="IBM", nChar=3) returned 1 [0127.083] StrCmpNW (lpStr1="svcho", lpStr2="bes10", nChar=5) returned 1 [0127.083] StrCmpNW (lpStr1="svcho", lpStr2="black", nChar=5) returned 1 [0127.083] StrCmpNW (lpStr1="svc", lpStr2="sql", nChar=3) returned 1 [0127.083] StrCmpNW (lpStr1="svchost.e", lpStr2="store.exe", nChar=9) returned 1 [0127.083] StrCmpNW (lpStr1="svc", lpStr2="vee", nChar=3) returned -1 [0127.083] StrCmpNW (lpStr1="svcho", lpStr2="postg", nChar=5) returned 1 [0127.083] StrCmpNW (lpStr1="svch", lpStr2="sage", nChar=4) returned 1 [0127.083] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x28, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.086] StrCmpNW (lpStr1="svcho", lpStr2="mysql", nChar=5) returned 1 [0127.086] StrCmpNW (lpStr1="svc", lpStr2="IBM", nChar=3) returned 1 [0127.086] StrCmpNW (lpStr1="svcho", lpStr2="bes10", nChar=5) returned 1 [0127.086] StrCmpNW (lpStr1="svcho", lpStr2="black", nChar=5) returned 1 [0127.086] StrCmpNW (lpStr1="svc", lpStr2="sql", nChar=3) returned 1 [0127.086] StrCmpNW (lpStr1="svchost.e", lpStr2="store.exe", nChar=9) returned 1 [0127.086] StrCmpNW (lpStr1="svc", lpStr2="vee", nChar=3) returned -1 [0127.086] StrCmpNW (lpStr1="svcho", lpStr2="postg", nChar=5) returned 1 [0127.086] StrCmpNW (lpStr1="svch", lpStr2="sage", nChar=4) returned 1 [0127.086] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0127.087] StrCmpNW (lpStr1="audio", lpStr2="mysql", nChar=5) returned -1 [0127.087] StrCmpNW (lpStr1="aud", lpStr2="IBM", nChar=3) returned -1 [0127.087] StrCmpNW (lpStr1="audio", lpStr2="bes10", nChar=5) returned -1 [0127.087] StrCmpNW (lpStr1="audio", lpStr2="black", nChar=5) returned -1 [0127.087] StrCmpNW (lpStr1="aud", lpStr2="sql", nChar=3) returned -1 [0127.087] StrCmpNW (lpStr1="audiodg.e", lpStr2="store.exe", nChar=9) returned -1 [0127.087] StrCmpNW (lpStr1="aud", lpStr2="vee", nChar=3) returned -1 [0127.087] StrCmpNW (lpStr1="audio", lpStr2="postg", nChar=5) returned -1 [0127.087] StrCmpNW (lpStr1="audi", lpStr2="sage", nChar=4) returned -1 [0127.087] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.088] StrCmpNW (lpStr1="svcho", lpStr2="mysql", nChar=5) returned 1 [0127.088] StrCmpNW (lpStr1="svc", lpStr2="IBM", nChar=3) returned 1 [0127.088] StrCmpNW (lpStr1="svcho", lpStr2="bes10", nChar=5) returned 1 [0127.088] StrCmpNW (lpStr1="svcho", lpStr2="black", nChar=5) returned 1 [0127.088] StrCmpNW (lpStr1="svc", lpStr2="sql", nChar=3) returned 1 [0127.089] StrCmpNW (lpStr1="svchost.e", lpStr2="store.exe", nChar=9) returned 1 [0127.089] StrCmpNW (lpStr1="svc", lpStr2="vee", nChar=3) returned -1 [0127.089] StrCmpNW (lpStr1="svcho", lpStr2="postg", nChar=5) returned 1 [0127.089] StrCmpNW (lpStr1="svch", lpStr2="sage", nChar=4) returned 1 [0127.089] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.089] StrCmpNW (lpStr1="svcho", lpStr2="mysql", nChar=5) returned 1 [0127.090] StrCmpNW (lpStr1="svc", lpStr2="IBM", nChar=3) returned 1 [0127.090] StrCmpNW (lpStr1="svcho", lpStr2="bes10", nChar=5) returned 1 [0127.090] StrCmpNW (lpStr1="svcho", lpStr2="black", nChar=5) returned 1 [0127.090] StrCmpNW (lpStr1="svc", lpStr2="sql", nChar=3) returned 1 [0127.090] StrCmpNW (lpStr1="svchost.e", lpStr2="store.exe", nChar=9) returned 1 [0127.090] StrCmpNW (lpStr1="svc", lpStr2="vee", nChar=3) returned -1 [0127.090] StrCmpNW (lpStr1="svcho", lpStr2="postg", nChar=5) returned 1 [0127.090] StrCmpNW (lpStr1="svch", lpStr2="sage", nChar=4) returned 1 [0127.090] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0127.091] StrCmpNW (lpStr1="dwm.e", lpStr2="mysql", nChar=5) returned -1 [0127.091] StrCmpNW (lpStr1="dwm", lpStr2="IBM", nChar=3) returned -1 [0127.091] StrCmpNW (lpStr1="dwm.e", lpStr2="bes10", nChar=5) returned 1 [0127.091] StrCmpNW (lpStr1="dwm.e", lpStr2="black", nChar=5) returned 1 [0127.091] StrCmpNW (lpStr1="dwm", lpStr2="sql", nChar=3) returned -1 [0127.091] StrCmpNW (lpStr1="dwm.exe", lpStr2="store.exe", nChar=9) returned -1 [0127.091] StrCmpNW (lpStr1="dwm", lpStr2="vee", nChar=3) returned -1 [0127.091] StrCmpNW (lpStr1="dwm.e", lpStr2="postg", nChar=5) returned -1 [0127.091] StrCmpNW (lpStr1="dwm.", lpStr2="sage", nChar=4) returned -1 [0127.091] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x43c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0127.092] StrCmpNW (lpStr1="explo", lpStr2="mysql", nChar=5) returned -1 [0127.092] StrCmpNW (lpStr1="exp", lpStr2="IBM", nChar=3) returned -1 [0127.092] StrCmpNW (lpStr1="explo", lpStr2="bes10", nChar=5) returned 1 [0127.092] StrCmpNW (lpStr1="explo", lpStr2="black", nChar=5) returned 1 [0127.092] StrCmpNW (lpStr1="exp", lpStr2="sql", nChar=3) returned -1 [0127.092] StrCmpNW (lpStr1="explorer.", lpStr2="store.exe", nChar=9) returned -1 [0127.092] StrCmpNW (lpStr1="exp", lpStr2="vee", nChar=3) returned -1 [0127.092] StrCmpNW (lpStr1="explo", lpStr2="postg", nChar=5) returned -1 [0127.092] StrCmpNW (lpStr1="expl", lpStr2="sage", nChar=4) returned -1 [0127.092] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x47c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0127.093] StrCmpNW (lpStr1="spool", lpStr2="mysql", nChar=5) returned 1 [0127.093] StrCmpNW (lpStr1="spo", lpStr2="IBM", nChar=3) returned 1 [0127.093] StrCmpNW (lpStr1="spool", lpStr2="bes10", nChar=5) returned 1 [0127.093] StrCmpNW (lpStr1="spool", lpStr2="black", nChar=5) returned 1 [0127.093] StrCmpNW (lpStr1="spo", lpStr2="sql", nChar=3) returned -1 [0127.093] StrCmpNW (lpStr1="spoolsv.e", lpStr2="store.exe", nChar=9) returned -1 [0127.093] StrCmpNW (lpStr1="spo", lpStr2="vee", nChar=3) returned -1 [0127.093] StrCmpNW (lpStr1="spool", lpStr2="postg", nChar=5) returned 1 [0127.093] StrCmpNW (lpStr1="spoo", lpStr2="sage", nChar=4) returned 1 [0127.093] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0127.094] StrCmpNW (lpStr1="taskh", lpStr2="mysql", nChar=5) returned 1 [0127.094] StrCmpNW (lpStr1="tas", lpStr2="IBM", nChar=3) returned 1 [0127.094] StrCmpNW (lpStr1="taskh", lpStr2="bes10", nChar=5) returned 1 [0127.094] StrCmpNW (lpStr1="taskh", lpStr2="black", nChar=5) returned 1 [0127.094] StrCmpNW (lpStr1="tas", lpStr2="sql", nChar=3) returned 1 [0127.094] StrCmpNW (lpStr1="taskhost.", lpStr2="store.exe", nChar=9) returned 1 [0127.094] StrCmpNW (lpStr1="tas", lpStr2="vee", nChar=3) returned -1 [0127.095] StrCmpNW (lpStr1="taskh", lpStr2="postg", nChar=5) returned 1 [0127.095] StrCmpNW (lpStr1="task", lpStr2="sage", nChar=4) returned 1 [0127.095] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.095] StrCmpNW (lpStr1="svcho", lpStr2="mysql", nChar=5) returned 1 [0127.095] StrCmpNW (lpStr1="svc", lpStr2="IBM", nChar=3) returned 1 [0127.095] StrCmpNW (lpStr1="svcho", lpStr2="bes10", nChar=5) returned 1 [0127.095] StrCmpNW (lpStr1="svcho", lpStr2="black", nChar=5) returned 1 [0127.096] StrCmpNW (lpStr1="svc", lpStr2="sql", nChar=3) returned 1 [0127.096] StrCmpNW (lpStr1="svchost.e", lpStr2="store.exe", nChar=9) returned 1 [0127.096] StrCmpNW (lpStr1="svc", lpStr2="vee", nChar=3) returned -1 [0127.096] StrCmpNW (lpStr1="svcho", lpStr2="postg", nChar=5) returned 1 [0127.096] StrCmpNW (lpStr1="svch", lpStr2="sage", nChar=4) returned 1 [0127.096] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0127.096] StrCmpNW (lpStr1="taske", lpStr2="mysql", nChar=5) returned 1 [0127.096] StrCmpNW (lpStr1="tas", lpStr2="IBM", nChar=3) returned 1 [0127.097] StrCmpNW (lpStr1="taske", lpStr2="bes10", nChar=5) returned 1 [0127.097] StrCmpNW (lpStr1="taske", lpStr2="black", nChar=5) returned 1 [0127.097] StrCmpNW (lpStr1="tas", lpStr2="sql", nChar=3) returned 1 [0127.097] StrCmpNW (lpStr1="taskeng.e", lpStr2="store.exe", nChar=9) returned 1 [0127.097] StrCmpNW (lpStr1="tas", lpStr2="vee", nChar=3) returned -1 [0127.097] StrCmpNW (lpStr1="taske", lpStr2="postg", nChar=5) returned 1 [0127.097] StrCmpNW (lpStr1="task", lpStr2="sage", nChar=4) returned 1 [0127.097] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d4, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0127.098] StrCmpNW (lpStr1="taskh", lpStr2="mysql", nChar=5) returned 1 [0127.098] StrCmpNW (lpStr1="tas", lpStr2="IBM", nChar=3) returned 1 [0127.098] StrCmpNW (lpStr1="taskh", lpStr2="bes10", nChar=5) returned 1 [0127.098] StrCmpNW (lpStr1="taskh", lpStr2="black", nChar=5) returned 1 [0127.098] StrCmpNW (lpStr1="tas", lpStr2="sql", nChar=3) returned 1 [0127.098] StrCmpNW (lpStr1="taskhost.", lpStr2="store.exe", nChar=9) returned 1 [0127.098] StrCmpNW (lpStr1="tas", lpStr2="vee", nChar=3) returned -1 [0127.098] StrCmpNW (lpStr1="taskh", lpStr2="postg", nChar=5) returned 1 [0127.098] StrCmpNW (lpStr1="task", lpStr2="sage", nChar=4) returned 1 [0127.098] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="disk_promo_host.exe")) returned 1 [0127.099] StrCmpNW (lpStr1="disk_", lpStr2="mysql", nChar=5) returned -1 [0127.099] StrCmpNW (lpStr1="dis", lpStr2="IBM", nChar=3) returned -1 [0127.099] StrCmpNW (lpStr1="disk_", lpStr2="bes10", nChar=5) returned 1 [0127.099] StrCmpNW (lpStr1="disk_", lpStr2="black", nChar=5) returned 1 [0127.099] StrCmpNW (lpStr1="dis", lpStr2="sql", nChar=3) returned -1 [0127.099] StrCmpNW (lpStr1="disk_prom", lpStr2="store.exe", nChar=9) returned -1 [0127.099] StrCmpNW (lpStr1="dis", lpStr2="vee", nChar=3) returned -1 [0127.099] StrCmpNW (lpStr1="disk_", lpStr2="postg", nChar=5) returned -1 [0127.099] StrCmpNW (lpStr1="disk", lpStr2="sage", nChar=4) returned -1 [0127.099] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="yn anthony.exe")) returned 1 [0127.100] StrCmpNW (lpStr1="yn an", lpStr2="mysql", nChar=5) returned 1 [0127.100] StrCmpNW (lpStr1="yn ", lpStr2="IBM", nChar=3) returned 1 [0127.100] StrCmpNW (lpStr1="yn an", lpStr2="bes10", nChar=5) returned 1 [0127.100] StrCmpNW (lpStr1="yn an", lpStr2="black", nChar=5) returned 1 [0127.100] StrCmpNW (lpStr1="yn ", lpStr2="sql", nChar=3) returned 1 [0127.100] StrCmpNW (lpStr1="yn anthon", lpStr2="store.exe", nChar=9) returned 1 [0127.100] StrCmpNW (lpStr1="yn ", lpStr2="vee", nChar=3) returned 1 [0127.100] StrCmpNW (lpStr1="yn an", lpStr2="postg", nChar=5) returned 1 [0127.100] StrCmpNW (lpStr1="yn a", lpStr2="sage", nChar=4) returned 1 [0127.101] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x584, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="observe beaver executives.exe")) returned 1 [0127.101] StrCmpNW (lpStr1="obser", lpStr2="mysql", nChar=5) returned 1 [0127.101] StrCmpNW (lpStr1="obs", lpStr2="IBM", nChar=3) returned 1 [0127.101] StrCmpNW (lpStr1="obser", lpStr2="bes10", nChar=5) returned 1 [0127.101] StrCmpNW (lpStr1="obser", lpStr2="black", nChar=5) returned 1 [0127.101] StrCmpNW (lpStr1="obs", lpStr2="sql", nChar=3) returned -1 [0127.101] StrCmpNW (lpStr1="observe b", lpStr2="store.exe", nChar=9) returned -1 [0127.102] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x660, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="sie_viewers.exe")) returned 1 [0127.103] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="voting-brandon.exe")) returned 1 [0127.103] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x778, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="lanka manufacturer painful.exe")) returned 1 [0127.104] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x770, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="granny silly azerbaijan.exe")) returned 1 [0127.105] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="bite belle printed.exe")) returned 1 [0127.105] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="pcs-eminem-brooklyn.exe")) returned 1 [0127.106] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="host.exe")) returned 1 [0127.107] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x38c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="studiessurface.exe")) returned 1 [0127.108] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x40c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="receptionmarriedexpand.exe")) returned 1 [0127.109] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="africa-arabic.exe")) returned 1 [0127.109] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="hughremains.exe")) returned 1 [0127.110] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x630, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="pos-spread.exe")) returned 1 [0127.111] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x640, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="vehicleshedcio.exe")) returned 1 [0127.112] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="fu-romania.exe")) returned 1 [0127.112] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="mon_substitute.exe")) returned 1 [0127.113] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="sponsored.exe")) returned 1 [0127.114] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="calgary.exe")) returned 1 [0127.115] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x51c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="worse.exe")) returned 1 [0127.115] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="full mention.exe")) returned 1 [0127.116] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="diff_tuning.exe")) returned 1 [0127.117] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="conferences fears printable.exe")) returned 1 [0127.118] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x994, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.119] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0127.119] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0128.113] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0128.114] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0128.115] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xaac, pcPriClassBase=8, dwFlags=0x0, szExeFile="YFeKw5dmGYVjgc.exe")) returned 1 [0128.116] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xad0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xaac, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0128.116] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xad8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0128.117] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xae4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xac8, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1 [0128.132] Process32NextW (in: hSnapshot=0x88, lppe=0x3afcbc | out: lppe=0x3afcbc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xae4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xac8, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 0 [0128.133] CloseHandle (hObject=0x88) returned 1 [0128.133] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0x4c74f0 [0128.136] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="MSSQLServerADHelper100", dwDesiredAccess=0x20) returned 0x0 [0128.136] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="MSSQL$ISARS", dwDesiredAccess=0x20) returned 0x0 [0128.137] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="MSSQL$MSFW", dwDesiredAccess=0x20) returned 0x0 [0128.137] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="SQLAgent$ISARS", dwDesiredAccess=0x20) returned 0x0 [0128.137] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="SQLAgent$MSFW", dwDesiredAccess=0x20) returned 0x0 [0128.137] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="MSExchangeFBA", dwDesiredAccess=0x20) returned 0x0 [0128.137] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="QuickBooksDB1", dwDesiredAccess=0x20) returned 0x0 [0128.138] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="QuickBooksDB2", dwDesiredAccess=0x20) returned 0x0 [0128.138] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="QuickBooksDB3", dwDesiredAccess=0x20) returned 0x0 [0128.138] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="QuickBooksDB4", dwDesiredAccess=0x20) returned 0x0 [0128.138] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="QuickBooksDB5", dwDesiredAccess=0x20) returned 0x0 [0128.138] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="QuickBooksDB6", dwDesiredAccess=0x20) returned 0x0 [0128.138] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="QuickBooksDB7", dwDesiredAccess=0x20) returned 0x0 [0128.139] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="QuickBooksDB8", dwDesiredAccess=0x20) returned 0x0 [0128.139] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="QuickBooksDB9", dwDesiredAccess=0x20) returned 0x0 [0128.139] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="QuickBooksDB10", dwDesiredAccess=0x20) returned 0x0 [0128.139] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="QuickBooksDB11", dwDesiredAccess=0x20) returned 0x0 [0128.139] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="QuickBooksDB12", dwDesiredAccess=0x20) returned 0x0 [0128.139] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="QuickBooksDB13", dwDesiredAccess=0x20) returned 0x0 [0128.140] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="QuickBooksDB14", dwDesiredAccess=0x20) returned 0x0 [0128.140] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="QuickBooksDB15", dwDesiredAccess=0x20) returned 0x0 [0128.140] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="QuickBooksDB16", dwDesiredAccess=0x20) returned 0x0 [0128.140] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="QuickBooksDB17", dwDesiredAccess=0x20) returned 0x0 [0128.140] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="QuickBooksDB18", dwDesiredAccess=0x20) returned 0x0 [0128.140] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="QuickBooksDB19", dwDesiredAccess=0x20) returned 0x0 [0128.141] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="QuickBooksDB20", dwDesiredAccess=0x20) returned 0x0 [0128.141] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="QuickBooksDB21", dwDesiredAccess=0x20) returned 0x0 [0128.141] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="QuickBooksDB22", dwDesiredAccess=0x20) returned 0x0 [0128.141] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="QuickBooksDB23", dwDesiredAccess=0x20) returned 0x0 [0128.141] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="QuickBooksDB24", dwDesiredAccess=0x20) returned 0x0 [0128.141] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="QuickBooksDB25", dwDesiredAccess=0x20) returned 0x0 [0128.142] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="IBM Domino Diagnostics (CProgramFilesIBMDomino)", dwDesiredAccess=0x20) returned 0x0 [0128.142] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="MSExchangeIS", dwDesiredAccess=0x20) returned 0x0 [0128.142] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="MSExchangeSA", dwDesiredAccess=0x20) returned 0x0 [0128.142] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="IBM Domino Server (CProgramFilesIBMDominodata)", dwDesiredAccess=0x20) returned 0x0 [0128.142] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="IISADMIN", dwDesiredAccess=0x20) returned 0x0 [0128.142] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="SQLBrowser", dwDesiredAccess=0x20) returned 0x0 [0128.143] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="ReportServer$ISARS", dwDesiredAccess=0x20) returned 0x0 [0128.143] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="SQLWriter", dwDesiredAccess=0x20) returned 0x0 [0128.143] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="MSExchangeADTopology", dwDesiredAccess=0x20) returned 0x0 [0128.143] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="WinDefend", dwDesiredAccess=0x20) returned 0x4c7450 [0128.144] ControlService (in: hService=0x4c7450, dwControl=0x1, lpServiceStatus=0x3afee8 | out: lpServiceStatus=0x3afee8*(dwServiceType=0x20, dwCurrentState=0x4, dwControlsAccepted=0x85, dwWin32ExitCode=0x0, dwServiceSpecificExitCode=0x0, dwCheckPoint=0x0, dwWaitHint=0x0)) returned 1 [0128.164] CloseServiceHandle (hSCObject=0x4c7450) returned 1 [0128.164] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="mr2kserv", dwDesiredAccess=0x20) returned 0x0 [0128.164] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="QBVSS", dwDesiredAccess=0x20) returned 0x0 [0128.164] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="QBCFMonitorService", dwDesiredAccess=0x20) returned 0x0 [0128.164] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="QBPOSDBServiceV12", dwDesiredAccess=0x20) returned 0x0 [0128.165] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="ibmiasrw", dwDesiredAccess=0x20) returned 0x0 [0128.165] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="Simply Accounting Database Connection Manager", dwDesiredAccess=0x20) returned 0x0 [0128.165] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="firebirdguardiandefaultinstance", dwDesiredAccess=0x20) returned 0x0 [0128.165] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="SPSearch4", dwDesiredAccess=0x20) returned 0x0 [0128.165] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="SPWriterV4", dwDesiredAccess=0x20) returned 0x0 [0128.166] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="SPUserCodeV4", dwDesiredAccess=0x20) returned 0x0 [0128.166] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="SPTraceV4", dwDesiredAccess=0x20) returned 0x0 [0128.166] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="SPTimerV4", dwDesiredAccess=0x20) returned 0x0 [0128.166] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="SPAdminV4", dwDesiredAccess=0x20) returned 0x0 [0128.166] OpenServiceW (hSCManager=0x4c74f0, lpServiceName="ShadowProtectSvc", dwDesiredAccess=0x20) returned 0x0 [0128.167] CloseServiceHandle (hSCObject=0x4c74f0) returned 1 [0128.180] CryptImportKey (in: hProv=0x4c50f8, pbData=0x4c4e58, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3aff08 | out: phKey=0x3aff08*=0x4c9308) returned 1 [0128.181] CryptGenRandom (in: hProv=0x4c50f8, dwLen=0x20, pbBuffer=0x8653c | out: pbBuffer=0x8653c) returned 1 [0128.181] CryptEncrypt (in: hKey=0x4c9308, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x86438*, pdwDataLen=0x3aff04*=0x20, dwBufLen=0x100 | out: pbData=0x86438*, pdwDataLen=0x3aff04*=0x100) returned 1 [0128.183] CryptDestroyKey (hKey=0x4c9308) returned 1 [0128.183] CryptGenRandom (in: hProv=0x4c50f8, dwLen=0x1, pbBuffer=0x3aff27 | out: pbBuffer=0x3aff27) returned 1 [0128.183] CryptGenRandom (in: hProv=0x4c50f8, dwLen=0x1, pbBuffer=0x3aff27 | out: pbBuffer=0x3aff27) returned 1 [0128.183] CryptGenRandom (in: hProv=0x4c50f8, dwLen=0x1, pbBuffer=0x3aff27 | out: pbBuffer=0x3aff27) returned 1 [0128.183] CryptGenRandom (in: hProv=0x4c50f8, dwLen=0x1, pbBuffer=0x3aff27 | out: pbBuffer=0x3aff27) returned 1 [0128.183] CryptGenRandom (in: hProv=0x4c50f8, dwLen=0x1, pbBuffer=0x3aff27 | out: pbBuffer=0x3aff27) returned 1 [0128.183] CryptGenRandom (in: hProv=0x4c50f8, dwLen=0x1, pbBuffer=0x3aff27 | out: pbBuffer=0x3aff27) returned 1 [0128.183] CryptGenRandom (in: hProv=0x4c50f8, dwLen=0x1, pbBuffer=0x3aff27 | out: pbBuffer=0x3aff27) returned 1 [0128.183] CryptGenRandom (in: hProv=0x4c50f8, dwLen=0x1, pbBuffer=0x3aff27 | out: pbBuffer=0x3aff27) returned 1 [0128.183] CryptGenRandom (in: hProv=0x4c50f8, dwLen=0x1, pbBuffer=0x3aff27 | out: pbBuffer=0x3aff27) returned 1 [0128.183] CryptGenRandom (in: hProv=0x4c50f8, dwLen=0x1, pbBuffer=0x3aff27 | out: pbBuffer=0x3aff27) returned 1 [0128.183] CryptGenRandom (in: hProv=0x4c50f8, dwLen=0x1, pbBuffer=0x3aff27 | out: pbBuffer=0x3aff27) returned 1 [0128.183] CryptGenRandom (in: hProv=0x4c50f8, dwLen=0x1, pbBuffer=0x3aff27 | out: pbBuffer=0x3aff27) returned 1 [0128.183] CryptGenRandom (in: hProv=0x4c50f8, dwLen=0x1, pbBuffer=0x3aff27 | out: pbBuffer=0x3aff27) returned 1 [0128.183] CryptGenRandom (in: hProv=0x4c50f8, dwLen=0x1, pbBuffer=0x3aff27 | out: pbBuffer=0x3aff27) returned 1 [0128.183] CryptGenRandom (in: hProv=0x4c50f8, dwLen=0x1, pbBuffer=0x3aff27 | out: pbBuffer=0x3aff27) returned 1 [0128.183] CryptGenRandom (in: hProv=0x4c50f8, dwLen=0x1, pbBuffer=0x3aff27 | out: pbBuffer=0x3aff27) returned 1 [0128.183] CryptReleaseContext (hProv=0x4c50f8, dwFlags=0x0) returned 1 [0128.183] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x86570 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x0 [0128.188] CreateFileW (lpFileName="debug.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\debug.log"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfc [0128.188] GetLogicalDrives () returned 0x4 [0128.188] wnsprintfW (in: pszDest=0x3afeb8, cchDest=25, pszFmt="%c:\\" | out: pszDest="C:\\") returned 3 [0128.188] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0128.188] wnsprintfW (in: pszDest=0x4cb340, cchDest=260, pszFmt="\\\\?\\%c:" | out: pszDest="\\\\?\\C:") returned 6 [0128.188] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x81aea, lpParameter=0x4cb340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf8 [0128.189] WaitForMultipleObjects (nCount=0x1, lpHandles=0x3afeec*=0xf8, bWaitAll=1, dwMilliseconds=0xffffffff) Thread: id = 9 os_tid = 0xaf8 Thread: id = 10 os_tid = 0xafc [0128.194] wnsprintfW (in: pszDest=0x4cb760, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\*") returned 8 [0128.194] FindFirstFileW (in: lpFileName="\\\\?\\C:\\*", lpFindFileData=0x24bf8e8 | out: lpFindFileData=0x24bf8e8) returned 0x4db768 [0128.195] lstrcmpiW (lpString1="$Recycle.Bin", lpString2="Windows") returned -1 [0128.195] lstrcmpiW (lpString1="$Recycle.Bin", lpString2="$Recycle.bin") returned 0 [0128.195] FindNextFileW (in: hFindFile=0x4db768, lpFindFileData=0x24bf8e8 | out: lpFindFileData=0x24bf8e8) returned 1 [0128.195] lstrcmpiW (lpString1="Boot", lpString2="Windows") returned -1 [0128.195] lstrcmpiW (lpString1="Boot", lpString2="$Recycle.bin") returned 1 [0128.195] lstrcmpiW (lpString1="Boot", lpString2="System Volume Information") returned -1 [0128.195] wnsprintfW (in: pszDest=0x4cb760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot") returned 11 [0128.196] wnsprintfW (in: pszDest=0x4dc7b0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\*") returned 13 [0128.196] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\*", lpFindFileData=0x24bf660 | out: lpFindFileData=0x24bf660) returned 0x4ec7b8 [0128.196] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1 [0128.196] lstrcmpiW (lpString1=".", lpString2="$Recycle.bin") returned 1 [0128.196] lstrcmpiW (lpString1=".", lpString2="System Volume Information") returned -1 [0128.196] wnsprintfW (in: pszDest=0x4dc7b0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\.") returned 13 [0128.196] StrStrIW (lpFirst=".", lpSrch=".CORP") returned 0x0 [0128.197] wnsprintfA (in: pszDest=0x24bf1c8, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\Boot\\.\r\n") returned 39 [0128.197] WriteFile (in: hFile=0xfc, lpBuffer=0x24bf1c8*, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0x24bf610, lpOverlapped=0x0 | out: lpBuffer=0x24bf1c8*, lpNumberOfBytesWritten=0x24bf610*=0x27, lpOverlapped=0x0) returned 1 [0128.198] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\." (normalized: "c:\\boot\\."), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.198] GetLastError () returned 0x7b [0128.198] wnsprintfA (in: pszDest=0x24bf1c8, cchDest=1024, pszFmt="Can't open file (Error: %d): %S\r\n" | out: pszDest="Can't open file (Error: 123): \\\\?\\C:\\Boot\\.\r\n") returned 45 [0128.198] WriteFile (in: hFile=0xfc, lpBuffer=0x24bf1c8*, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0x24bf610, lpOverlapped=0x0 | out: lpBuffer=0x24bf1c8*, lpNumberOfBytesWritten=0x24bf610*=0x2d, lpOverlapped=0x0) returned 1 [0128.198] FindNextFileW (in: hFindFile=0x4ec7b8, lpFindFileData=0x24bf660 | out: lpFindFileData=0x24bf660) returned 1 [0128.198] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1 [0128.198] lstrcmpiW (lpString1="..", lpString2="$Recycle.bin") returned 1 [0128.199] lstrcmpiW (lpString1="..", lpString2="System Volume Information") returned -1 [0128.199] wnsprintfW (in: pszDest=0x4dc7b0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\..") returned 14 [0128.199] StrStrIW (lpFirst="..", lpSrch=".CORP") returned 0x0 [0128.199] wnsprintfA (in: pszDest=0x24bf1c8, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\Boot\\..\r\n") returned 40 [0128.199] WriteFile (in: hFile=0xfc, lpBuffer=0x24bf1c8*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x24bf610, lpOverlapped=0x0 | out: lpBuffer=0x24bf1c8*, lpNumberOfBytesWritten=0x24bf610*=0x28, lpOverlapped=0x0) returned 1 [0128.199] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\.." (normalized: "c:"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.199] GetLastError () returned 0x7b [0128.199] wnsprintfA (in: pszDest=0x24bf1c8, cchDest=1024, pszFmt="Can't open file (Error: %d): %S\r\n" | out: pszDest="Can't open file (Error: 123): \\\\?\\C:\\Boot\\..\r\n") returned 46 [0128.199] WriteFile (in: hFile=0xfc, lpBuffer=0x24bf1c8*, nNumberOfBytesToWrite=0x2e, lpNumberOfBytesWritten=0x24bf610, lpOverlapped=0x0 | out: lpBuffer=0x24bf1c8*, lpNumberOfBytesWritten=0x24bf610*=0x2e, lpOverlapped=0x0) returned 1 [0128.199] FindNextFileW (in: hFindFile=0x4ec7b8, lpFindFileData=0x24bf660 | out: lpFindFileData=0x24bf660) returned 1 [0128.199] lstrcmpiW (lpString1="BCD", lpString2="Windows") returned -1 [0128.200] lstrcmpiW (lpString1="BCD", lpString2="$Recycle.bin") returned 1 [0128.200] lstrcmpiW (lpString1="BCD", lpString2="System Volume Information") returned -1 [0128.200] wnsprintfW (in: pszDest=0x4dc7b0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\BCD") returned 15 [0128.200] StrStrIW (lpFirst="BCD", lpSrch=".CORP") returned 0x0 [0128.200] wnsprintfA (in: pszDest=0x24bf1c8, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\Boot\\BCD\r\n") returned 41 [0128.200] WriteFile (in: hFile=0xfc, lpBuffer=0x24bf1c8*, nNumberOfBytesToWrite=0x29, lpNumberOfBytesWritten=0x24bf610, lpOverlapped=0x0 | out: lpBuffer=0x24bf1c8*, lpNumberOfBytesWritten=0x24bf610*=0x29, lpOverlapped=0x0) returned 1 [0128.200] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BCD" (normalized: "c:\\boot\\bcd"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.200] GetLastError () returned 0x20 [0128.200] wnsprintfA (in: pszDest=0x24bf1c8, cchDest=1024, pszFmt="Can't open file (Error: %d): %S\r\n" | out: pszDest="Can't open file (Error: 32): \\\\?\\C:\\Boot\\BCD\r\n") returned 46 [0128.200] WriteFile (in: hFile=0xfc, lpBuffer=0x24bf1c8*, nNumberOfBytesToWrite=0x2e, lpNumberOfBytesWritten=0x24bf610, lpOverlapped=0x0 | out: lpBuffer=0x24bf1c8*, lpNumberOfBytesWritten=0x24bf610*=0x2e, lpOverlapped=0x0) returned 1 [0128.201] FindNextFileW (in: hFindFile=0x4ec7b8, lpFindFileData=0x24bf660 | out: lpFindFileData=0x24bf660) returned 1 [0128.201] lstrcmpiW (lpString1="BCD.LOG", lpString2="Windows") returned -1 [0128.201] lstrcmpiW (lpString1="BCD.LOG", lpString2="$Recycle.bin") returned 1 [0128.201] lstrcmpiW (lpString1="BCD.LOG", lpString2="System Volume Information") returned -1 [0128.201] wnsprintfW (in: pszDest=0x4dc7b0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\BCD.LOG") returned 19 [0128.201] StrStrIW (lpFirst="BCD.LOG", lpSrch=".CORP") returned 0x0 [0128.201] wnsprintfA (in: pszDest=0x24bf1c8, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\Boot\\BCD.LOG\r\n") returned 45 [0128.201] WriteFile (in: hFile=0xfc, lpBuffer=0x24bf1c8*, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0x24bf610, lpOverlapped=0x0 | out: lpBuffer=0x24bf1c8*, lpNumberOfBytesWritten=0x24bf610*=0x2d, lpOverlapped=0x0) returned 1 [0128.201] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.201] GetLastError () returned 0x20 [0128.201] wnsprintfA (in: pszDest=0x24bf1c8, cchDest=1024, pszFmt="Can't open file (Error: %d): %S\r\n" | out: pszDest="Can't open file (Error: 32): \\\\?\\C:\\Boot\\BCD.LOG\r\n") returned 50 [0128.201] WriteFile (in: hFile=0xfc, lpBuffer=0x24bf1c8*, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0x24bf610, lpOverlapped=0x0 | out: lpBuffer=0x24bf1c8*, lpNumberOfBytesWritten=0x24bf610*=0x32, lpOverlapped=0x0) returned 1 [0128.202] FindNextFileW (in: hFindFile=0x4ec7b8, lpFindFileData=0x24bf660 | out: lpFindFileData=0x24bf660) returned 1 [0128.202] lstrcmpiW (lpString1="BCD.LOG1", lpString2="Windows") returned -1 [0128.202] lstrcmpiW (lpString1="BCD.LOG1", lpString2="$Recycle.bin") returned 1 [0128.202] lstrcmpiW (lpString1="BCD.LOG1", lpString2="System Volume Information") returned -1 [0128.202] wnsprintfW (in: pszDest=0x4dc7b0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\BCD.LOG1") returned 20 [0128.202] StrStrIW (lpFirst="BCD.LOG1", lpSrch=".CORP") returned 0x0 [0128.202] wnsprintfA (in: pszDest=0x24bf1c8, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\Boot\\BCD.LOG1\r\n") returned 46 [0128.202] WriteFile (in: hFile=0xfc, lpBuffer=0x24bf1c8*, nNumberOfBytesToWrite=0x2e, lpNumberOfBytesWritten=0x24bf610, lpOverlapped=0x0 | out: lpBuffer=0x24bf1c8*, lpNumberOfBytesWritten=0x24bf610*=0x2e, lpOverlapped=0x0) returned 1 [0128.202] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0128.203] ReadFile (in: hFile=0x108, lpBuffer=0x4ed800, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf624, lpOverlapped=0x0 | out: lpBuffer=0x4ed800*, lpNumberOfBytesRead=0x24bf624*=0x0, lpOverlapped=0x0) returned 1 [0128.203] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.203] WriteFile (in: hFile=0x108, lpBuffer=0x4ed800*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x24bf624, lpOverlapped=0x0 | out: lpBuffer=0x4ed800*, lpNumberOfBytesWritten=0x24bf624*=0x0, lpOverlapped=0x0) returned 1 [0128.203] WriteFile (in: hFile=0x108, lpBuffer=0x86438*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x24bf624, lpOverlapped=0x0 | out: lpBuffer=0x86438*, lpNumberOfBytesWritten=0x24bf624*=0x100, lpOverlapped=0x0) returned 1 [0128.204] CloseHandle (hObject=0x108) returned 1 [0128.208] wnsprintfA (in: pszDest=0x24bf1c8, cchDest=1024, pszFmt="File encrypted: %S\r\n" | out: pszDest="File encrypted: \\\\?\\C:\\Boot\\BCD.LOG1\r\n") returned 38 [0128.208] WriteFile (in: hFile=0xfc, lpBuffer=0x24bf1c8*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x24bf624, lpOverlapped=0x0 | out: lpBuffer=0x24bf1c8*, lpNumberOfBytesWritten=0x24bf624*=0x26, lpOverlapped=0x0) returned 1 [0128.208] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s_%S_{%S}%s" | out: pszDest="\\\\?\\C:\\Boot\\BCD.LOG1_9c4rmT6TdKfuH9Ft_{alexbanan@tuta.io}.CORP") returned 62 [0128.208] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), lpNewFileName="\\\\?\\C:\\Boot\\BCD.LOG1_9c4rmT6TdKfuH9Ft_{alexbanan@tuta.io}.CORP" (normalized: "c:\\boot\\bcd.log1_9c4rmt6tdkfuh9ft_{alexbanan@tuta.io}.corp")) returned 1 [0128.209] wnsprintfA (in: pszDest=0x24bf1c8, cchDest=1024, pszFmt="File name changed: %S\r\n" | out: pszDest="File name changed: \\\\?\\C:\\Boot\\BCD.LOG1\r\n") returned 41 [0128.209] WriteFile (in: hFile=0xfc, lpBuffer=0x24bf1c8*, nNumberOfBytesToWrite=0x29, lpNumberOfBytesWritten=0x24bf624, lpOverlapped=0x0 | out: lpBuffer=0x24bf1c8*, lpNumberOfBytesWritten=0x24bf624*=0x29, lpOverlapped=0x0) returned 1 [0128.209] FindNextFileW (in: hFindFile=0x4ec7b8, lpFindFileData=0x24bf660 | out: lpFindFileData=0x24bf660) returned 1 [0128.209] lstrcmpiW (lpString1="BCD.LOG2", lpString2="Windows") returned -1 [0128.209] lstrcmpiW (lpString1="BCD.LOG2", lpString2="$Recycle.bin") returned 1 [0128.209] lstrcmpiW (lpString1="BCD.LOG2", lpString2="System Volume Information") returned -1 [0128.209] wnsprintfW (in: pszDest=0x4dc7b0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\BCD.LOG2") returned 20 [0128.210] StrStrIW (lpFirst="BCD.LOG2", lpSrch=".CORP") returned 0x0 [0128.210] wnsprintfA (in: pszDest=0x24bf1c8, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\Boot\\BCD.LOG2\r\n") returned 46 [0128.210] WriteFile (in: hFile=0xfc, lpBuffer=0x24bf1c8*, nNumberOfBytesToWrite=0x2e, lpNumberOfBytesWritten=0x24bf610, lpOverlapped=0x0 | out: lpBuffer=0x24bf1c8*, lpNumberOfBytesWritten=0x24bf610*=0x2e, lpOverlapped=0x0) returned 1 [0128.210] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0128.210] ReadFile (in: hFile=0x108, lpBuffer=0x4ed800, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf624, lpOverlapped=0x0 | out: lpBuffer=0x4ed800*, lpNumberOfBytesRead=0x24bf624*=0x0, lpOverlapped=0x0) returned 1 [0128.210] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.210] WriteFile (in: hFile=0x108, lpBuffer=0x4ed800*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x24bf624, lpOverlapped=0x0 | out: lpBuffer=0x4ed800*, lpNumberOfBytesWritten=0x24bf624*=0x0, lpOverlapped=0x0) returned 1 [0128.211] WriteFile (in: hFile=0x108, lpBuffer=0x86438*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x24bf624, lpOverlapped=0x0 | out: lpBuffer=0x86438*, lpNumberOfBytesWritten=0x24bf624*=0x100, lpOverlapped=0x0) returned 1 [0128.212] CloseHandle (hObject=0x108) returned 1 [0128.212] wnsprintfA (in: pszDest=0x24bf1c8, cchDest=1024, pszFmt="File encrypted: %S\r\n" | out: pszDest="File encrypted: \\\\?\\C:\\Boot\\BCD.LOG2\r\n") returned 38 [0128.212] WriteFile (in: hFile=0xfc, lpBuffer=0x24bf1c8*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x24bf624, lpOverlapped=0x0 | out: lpBuffer=0x24bf1c8*, lpNumberOfBytesWritten=0x24bf624*=0x26, lpOverlapped=0x0) returned 1 [0128.213] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s_%S_{%S}%s" | out: pszDest="\\\\?\\C:\\Boot\\BCD.LOG2_9c4rmT6TdKfuH9Ft_{alexbanan@tuta.io}.CORP") returned 62 [0128.213] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), lpNewFileName="\\\\?\\C:\\Boot\\BCD.LOG2_9c4rmT6TdKfuH9Ft_{alexbanan@tuta.io}.CORP" (normalized: "c:\\boot\\bcd.log2_9c4rmt6tdkfuh9ft_{alexbanan@tuta.io}.corp")) returned 1 [0128.214] wnsprintfA (in: pszDest=0x24bf1c8, cchDest=1024, pszFmt="File name changed: %S\r\n" | out: pszDest="File name changed: \\\\?\\C:\\Boot\\BCD.LOG2\r\n") returned 41 [0128.214] WriteFile (in: hFile=0xfc, lpBuffer=0x24bf1c8*, nNumberOfBytesToWrite=0x29, lpNumberOfBytesWritten=0x24bf624, lpOverlapped=0x0 | out: lpBuffer=0x24bf1c8*, lpNumberOfBytesWritten=0x24bf624*=0x29, lpOverlapped=0x0) returned 1 [0128.216] FindNextFileW (in: hFindFile=0x4ec7b8, lpFindFileData=0x24bf660 | out: lpFindFileData=0x24bf660) returned 1 [0128.216] lstrcmpiW (lpString1="BOOTSTAT.DAT", lpString2="Windows") returned -1 [0128.219] lstrcmpiW (lpString1="BOOTSTAT.DAT", lpString2="$Recycle.bin") returned 1 [0128.219] lstrcmpiW (lpString1="BOOTSTAT.DAT", lpString2="System Volume Information") returned -1 [0128.219] wnsprintfW (in: pszDest=0x4dc7b0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\BOOTSTAT.DAT") returned 24 [0128.220] StrStrIW (lpFirst="BOOTSTAT.DAT", lpSrch=".CORP") returned 0x0 [0128.220] wnsprintfA (in: pszDest=0x24bf1c8, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\Boot\\BOOTSTAT.DAT\r\n") returned 50 [0128.220] WriteFile (in: hFile=0xfc, lpBuffer=0x24bf1c8*, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0x24bf610, lpOverlapped=0x0 | out: lpBuffer=0x24bf1c8*, lpNumberOfBytesWritten=0x24bf610*=0x32, lpOverlapped=0x0) returned 1 [0128.220] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0128.225] ReadFile (in: hFile=0x108, lpBuffer=0x4ed800, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf624, lpOverlapped=0x0 | out: lpBuffer=0x4ed800*, lpNumberOfBytesRead=0x24bf624*=0x2800, lpOverlapped=0x0) returned 1 [0128.229] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0128.229] WriteFile (in: hFile=0x108, lpBuffer=0x4ed800*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf624, lpOverlapped=0x0 | out: lpBuffer=0x4ed800*, lpNumberOfBytesWritten=0x24bf624*=0x2800, lpOverlapped=0x0) returned 1 [0128.229] ReadFile (in: hFile=0x108, lpBuffer=0x4ed800, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf624, lpOverlapped=0x0 | out: lpBuffer=0x4ed800*, lpNumberOfBytesRead=0x24bf624*=0x2800, lpOverlapped=0x0) returned 1 [0128.230] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0128.230] WriteFile (in: hFile=0x108, lpBuffer=0x4ed800*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf624, lpOverlapped=0x0 | out: lpBuffer=0x4ed800*, lpNumberOfBytesWritten=0x24bf624*=0x2800, lpOverlapped=0x0) returned 1 [0128.230] ReadFile (in: hFile=0x108, lpBuffer=0x4ed800, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf624, lpOverlapped=0x0 | out: lpBuffer=0x4ed800*, lpNumberOfBytesRead=0x24bf624*=0x2800, lpOverlapped=0x0) returned 1 [0128.230] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0128.230] WriteFile (in: hFile=0x108, lpBuffer=0x4ed800*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf624, lpOverlapped=0x0 | out: lpBuffer=0x4ed800*, lpNumberOfBytesWritten=0x24bf624*=0x2800, lpOverlapped=0x0) returned 1 [0128.230] ReadFile (in: hFile=0x108, lpBuffer=0x4ed800, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf624, lpOverlapped=0x0 | out: lpBuffer=0x4ed800*, lpNumberOfBytesRead=0x24bf624*=0x2800, lpOverlapped=0x0) returned 1 [0128.230] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0128.230] WriteFile (in: hFile=0x108, lpBuffer=0x4ed800*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf624, lpOverlapped=0x0 | out: lpBuffer=0x4ed800*, lpNumberOfBytesWritten=0x24bf624*=0x2800, lpOverlapped=0x0) returned 1 [0128.230] ReadFile (in: hFile=0x108, lpBuffer=0x4ed800, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf624, lpOverlapped=0x0 | out: lpBuffer=0x4ed800*, lpNumberOfBytesRead=0x24bf624*=0x2800, lpOverlapped=0x0) returned 1 [0128.230] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0128.231] WriteFile (in: hFile=0x108, lpBuffer=0x4ed800*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf624, lpOverlapped=0x0 | out: lpBuffer=0x4ed800*, lpNumberOfBytesWritten=0x24bf624*=0x2800, lpOverlapped=0x0) returned 1 [0128.231] ReadFile (in: hFile=0x108, lpBuffer=0x4ed800, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf624, lpOverlapped=0x0 | out: lpBuffer=0x4ed800*, lpNumberOfBytesRead=0x24bf624*=0x2800, lpOverlapped=0x0) returned 1 [0128.231] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0128.231] WriteFile (in: hFile=0x108, lpBuffer=0x4ed800*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf624, lpOverlapped=0x0 | out: lpBuffer=0x4ed800*, lpNumberOfBytesWritten=0x24bf624*=0x2800, lpOverlapped=0x0) returned 1 [0128.231] ReadFile (in: hFile=0x108, lpBuffer=0x4ed800, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf624, lpOverlapped=0x0 | out: lpBuffer=0x4ed800*, lpNumberOfBytesRead=0x24bf624*=0x1000, lpOverlapped=0x0) returned 1 [0128.231] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0128.231] WriteFile (in: hFile=0x108, lpBuffer=0x4ed800*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x24bf624, lpOverlapped=0x0 | out: lpBuffer=0x4ed800*, lpNumberOfBytesWritten=0x24bf624*=0x1000, lpOverlapped=0x0) returned 1 [0128.231] WriteFile (in: hFile=0x108, lpBuffer=0x86438*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x24bf624, lpOverlapped=0x0 | out: lpBuffer=0x86438*, lpNumberOfBytesWritten=0x24bf624*=0x100, lpOverlapped=0x0) returned 1 [0128.231] CloseHandle (hObject=0x108) returned 1 [0128.233] wnsprintfA (in: pszDest=0x24bf1c8, cchDest=1024, pszFmt="File encrypted: %S\r\n" | out: pszDest="File encrypted: \\\\?\\C:\\Boot\\BOOTSTAT.DAT\r\n") returned 42 [0128.233] WriteFile (in: hFile=0xfc, lpBuffer=0x24bf1c8*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x24bf624, lpOverlapped=0x0 | out: lpBuffer=0x24bf1c8*, lpNumberOfBytesWritten=0x24bf624*=0x2a, lpOverlapped=0x0) returned 1 [0128.234] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s_%S_{%S}%s" | out: pszDest="\\\\?\\C:\\Boot\\BOOTSTAT.DAT_9c4rmT6TdKfuH9Ft_{alexbanan@tuta.io}.CORP") returned 66 [0128.234] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), lpNewFileName="\\\\?\\C:\\Boot\\BOOTSTAT.DAT_9c4rmT6TdKfuH9Ft_{alexbanan@tuta.io}.CORP" (normalized: "c:\\boot\\bootstat.dat_9c4rmt6tdkfuh9ft_{alexbanan@tuta.io}.corp")) returned 1 [0128.235] wnsprintfA (in: pszDest=0x24bf1c8, cchDest=1024, pszFmt="File name changed: %S\r\n" | out: pszDest="File name changed: \\\\?\\C:\\Boot\\BOOTSTAT.DAT\r\n") returned 45 [0128.235] WriteFile (in: hFile=0xfc, lpBuffer=0x24bf1c8*, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0x24bf624, lpOverlapped=0x0 | out: lpBuffer=0x24bf1c8*, lpNumberOfBytesWritten=0x24bf624*=0x2d, lpOverlapped=0x0) returned 1 [0128.235] FindNextFileW (in: hFindFile=0x4ec7b8, lpFindFileData=0x24bf660 | out: lpFindFileData=0x24bf660) returned 1 [0128.235] lstrcmpiW (lpString1="cs-CZ", lpString2="Windows") returned -1 [0128.235] lstrcmpiW (lpString1="cs-CZ", lpString2="$Recycle.bin") returned 1 [0128.235] lstrcmpiW (lpString1="cs-CZ", lpString2="System Volume Information") returned -1 [0128.235] wnsprintfW (in: pszDest=0x4dc7b0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\cs-CZ") returned 17 [0128.235] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\cs-CZ\\*") returned 19 [0128.235] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\*", lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 0x4fd808 [0128.235] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1 [0128.235] lstrcmpiW (lpString1=".", lpString2="$Recycle.bin") returned 1 [0128.235] lstrcmpiW (lpString1=".", lpString2="System Volume Information") returned -1 [0128.235] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\cs-CZ\\.") returned 19 [0128.236] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0128.236] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1 [0128.236] lstrcmpiW (lpString1="..", lpString2="$Recycle.bin") returned 1 [0128.236] lstrcmpiW (lpString1="..", lpString2="System Volume Information") returned -1 [0128.236] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\cs-CZ\\..") returned 20 [0128.236] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0128.236] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="Windows") returned -1 [0128.236] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="$Recycle.bin") returned 1 [0128.236] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="System Volume Information") returned -1 [0128.236] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 33 [0128.236] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch=".CORP") returned 0x0 [0128.236] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui\r\n") returned 59 [0128.236] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3b, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3b, lpOverlapped=0x0) returned 1 [0128.236] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.236] GetLastError () returned 0x5 [0128.236] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Can't open file (Error: %d): %S\r\n" | out: pszDest="Can't open file (Error: 5): \\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui\r\n") returned 63 [0128.236] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3f, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3f, lpOverlapped=0x0) returned 1 [0128.236] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 0 [0128.236] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\cs-CZ\\$%%! NOTE ABOUT FILES -=!-.html") returned 49 [0128.236] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\$%%! NOTE ABOUT FILES -=!-.html" (normalized: "c:\\boot\\cs-cz\\$%%! note about files -=!-.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0128.237] WriteFile (in: hFile=0x10c, lpBuffer=0x85018*, nNumberOfBytesToWrite=0x647, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85018*, lpNumberOfBytesWritten=0x24bf3a0*=0x647, lpOverlapped=0x0) returned 1 [0128.238] WriteFile (in: hFile=0x10c, lpBuffer=0x8655c*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x8655c*, lpNumberOfBytesWritten=0x24bf3a0*=0x10, lpOverlapped=0x0) returned 1 [0128.238] WriteFile (in: hFile=0x10c, lpBuffer=0x85660*, nNumberOfBytesToWrite=0x5ac, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85660*, lpNumberOfBytesWritten=0x24bf3a0*=0x5ac, lpOverlapped=0x0) returned 1 [0128.238] WriteFile (in: hFile=0x10c, lpBuffer=0x4c4f9a*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x4c4f9a*, lpNumberOfBytesWritten=0x24bf3a0*=0x11, lpOverlapped=0x0) returned 1 [0128.238] WriteFile (in: hFile=0x10c, lpBuffer=0x85c10*, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85c10*, lpNumberOfBytesWritten=0x24bf3a0*=0x62, lpOverlapped=0x0) returned 1 [0128.238] WriteFile (in: hFile=0x10c, lpBuffer=0x4c4fcc*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x4c4fcc*, lpNumberOfBytesWritten=0x24bf3a0*=0x11, lpOverlapped=0x0) returned 1 [0128.238] WriteFile (in: hFile=0x10c, lpBuffer=0x85c78*, nNumberOfBytesToWrite=0x2af, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85c78*, lpNumberOfBytesWritten=0x24bf3a0*=0x2af, lpOverlapped=0x0) returned 1 [0128.238] CloseHandle (hObject=0x10c) returned 1 [0128.242] FindClose (in: hFindFile=0x4fd808 | out: hFindFile=0x4fd808) returned 1 [0128.242] FindNextFileW (in: hFindFile=0x4ec7b8, lpFindFileData=0x24bf660 | out: lpFindFileData=0x24bf660) returned 1 [0128.242] lstrcmpiW (lpString1="da-DK", lpString2="Windows") returned -1 [0128.242] lstrcmpiW (lpString1="da-DK", lpString2="$Recycle.bin") returned 1 [0128.242] lstrcmpiW (lpString1="da-DK", lpString2="System Volume Information") returned -1 [0128.242] wnsprintfW (in: pszDest=0x4dc7b0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\da-DK") returned 17 [0128.242] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\da-DK\\*") returned 19 [0128.242] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\da-DK\\*", lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 0x4fd808 [0128.247] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1 [0128.247] lstrcmpiW (lpString1=".", lpString2="$Recycle.bin") returned 1 [0128.247] lstrcmpiW (lpString1=".", lpString2="System Volume Information") returned -1 [0128.247] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\da-DK\\.") returned 19 [0128.247] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0128.247] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1 [0128.247] lstrcmpiW (lpString1="..", lpString2="$Recycle.bin") returned 1 [0128.247] lstrcmpiW (lpString1="..", lpString2="System Volume Information") returned -1 [0128.248] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\da-DK\\..") returned 20 [0128.248] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0128.248] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="Windows") returned -1 [0128.248] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="$Recycle.bin") returned 1 [0128.248] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="System Volume Information") returned -1 [0128.248] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui") returned 33 [0128.248] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch=".CORP") returned 0x0 [0128.248] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui\r\n") returned 59 [0128.248] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3b, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3b, lpOverlapped=0x0) returned 1 [0128.248] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.249] GetLastError () returned 0x5 [0128.249] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Can't open file (Error: %d): %S\r\n" | out: pszDest="Can't open file (Error: 5): \\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui\r\n") returned 63 [0128.249] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3f, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3f, lpOverlapped=0x0) returned 1 [0128.249] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 0 [0128.249] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\da-DK\\$%%! NOTE ABOUT FILES -=!-.html") returned 49 [0128.249] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\$%%! NOTE ABOUT FILES -=!-.html" (normalized: "c:\\boot\\da-dk\\$%%! note about files -=!-.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0128.250] WriteFile (in: hFile=0x10c, lpBuffer=0x85018*, nNumberOfBytesToWrite=0x647, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85018*, lpNumberOfBytesWritten=0x24bf3a0*=0x647, lpOverlapped=0x0) returned 1 [0128.251] WriteFile (in: hFile=0x10c, lpBuffer=0x8655c*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x8655c*, lpNumberOfBytesWritten=0x24bf3a0*=0x10, lpOverlapped=0x0) returned 1 [0128.251] WriteFile (in: hFile=0x10c, lpBuffer=0x85660*, nNumberOfBytesToWrite=0x5ac, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85660*, lpNumberOfBytesWritten=0x24bf3a0*=0x5ac, lpOverlapped=0x0) returned 1 [0128.251] WriteFile (in: hFile=0x10c, lpBuffer=0x4c4f9a*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x4c4f9a*, lpNumberOfBytesWritten=0x24bf3a0*=0x11, lpOverlapped=0x0) returned 1 [0128.251] WriteFile (in: hFile=0x10c, lpBuffer=0x85c10*, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85c10*, lpNumberOfBytesWritten=0x24bf3a0*=0x62, lpOverlapped=0x0) returned 1 [0128.251] WriteFile (in: hFile=0x10c, lpBuffer=0x4c4fcc*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x4c4fcc*, lpNumberOfBytesWritten=0x24bf3a0*=0x11, lpOverlapped=0x0) returned 1 [0128.251] WriteFile (in: hFile=0x10c, lpBuffer=0x85c78*, nNumberOfBytesToWrite=0x2af, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85c78*, lpNumberOfBytesWritten=0x24bf3a0*=0x2af, lpOverlapped=0x0) returned 1 [0128.251] CloseHandle (hObject=0x10c) returned 1 [0128.251] FindClose (in: hFindFile=0x4fd808 | out: hFindFile=0x4fd808) returned 1 [0128.251] FindNextFileW (in: hFindFile=0x4ec7b8, lpFindFileData=0x24bf660 | out: lpFindFileData=0x24bf660) returned 1 [0128.252] lstrcmpiW (lpString1="de-DE", lpString2="Windows") returned -1 [0128.252] lstrcmpiW (lpString1="de-DE", lpString2="$Recycle.bin") returned 1 [0128.252] lstrcmpiW (lpString1="de-DE", lpString2="System Volume Information") returned -1 [0128.252] wnsprintfW (in: pszDest=0x4dc7b0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\de-DE") returned 17 [0128.252] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\de-DE\\*") returned 19 [0128.252] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\de-DE\\*", lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 0x4fd808 [0128.252] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1 [0128.252] lstrcmpiW (lpString1=".", lpString2="$Recycle.bin") returned 1 [0128.252] lstrcmpiW (lpString1=".", lpString2="System Volume Information") returned -1 [0128.252] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\de-DE\\.") returned 19 [0128.252] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0128.252] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1 [0128.252] lstrcmpiW (lpString1="..", lpString2="$Recycle.bin") returned 1 [0128.252] lstrcmpiW (lpString1="..", lpString2="System Volume Information") returned -1 [0128.252] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\de-DE\\..") returned 20 [0128.252] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0128.252] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="Windows") returned -1 [0128.252] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="$Recycle.bin") returned 1 [0128.252] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="System Volume Information") returned -1 [0128.252] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui") returned 33 [0128.253] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch=".CORP") returned 0x0 [0128.253] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui\r\n") returned 59 [0128.253] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3b, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3b, lpOverlapped=0x0) returned 1 [0128.253] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.253] GetLastError () returned 0x5 [0128.253] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Can't open file (Error: %d): %S\r\n" | out: pszDest="Can't open file (Error: 5): \\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui\r\n") returned 63 [0128.253] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3f, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3f, lpOverlapped=0x0) returned 1 [0128.253] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 0 [0128.253] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\de-DE\\$%%! NOTE ABOUT FILES -=!-.html") returned 49 [0128.253] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\$%%! NOTE ABOUT FILES -=!-.html" (normalized: "c:\\boot\\de-de\\$%%! note about files -=!-.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0128.253] WriteFile (in: hFile=0x10c, lpBuffer=0x85018*, nNumberOfBytesToWrite=0x647, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85018*, lpNumberOfBytesWritten=0x24bf3a0*=0x647, lpOverlapped=0x0) returned 1 [0128.254] WriteFile (in: hFile=0x10c, lpBuffer=0x8655c*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x8655c*, lpNumberOfBytesWritten=0x24bf3a0*=0x10, lpOverlapped=0x0) returned 1 [0128.254] WriteFile (in: hFile=0x10c, lpBuffer=0x85660*, nNumberOfBytesToWrite=0x5ac, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85660*, lpNumberOfBytesWritten=0x24bf3a0*=0x5ac, lpOverlapped=0x0) returned 1 [0128.254] WriteFile (in: hFile=0x10c, lpBuffer=0x4c4f9a*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x4c4f9a*, lpNumberOfBytesWritten=0x24bf3a0*=0x11, lpOverlapped=0x0) returned 1 [0128.254] WriteFile (in: hFile=0x10c, lpBuffer=0x85c10*, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85c10*, lpNumberOfBytesWritten=0x24bf3a0*=0x62, lpOverlapped=0x0) returned 1 [0128.255] WriteFile (in: hFile=0x10c, lpBuffer=0x4c4fcc*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x4c4fcc*, lpNumberOfBytesWritten=0x24bf3a0*=0x11, lpOverlapped=0x0) returned 1 [0128.255] WriteFile (in: hFile=0x10c, lpBuffer=0x85c78*, nNumberOfBytesToWrite=0x2af, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85c78*, lpNumberOfBytesWritten=0x24bf3a0*=0x2af, lpOverlapped=0x0) returned 1 [0128.255] CloseHandle (hObject=0x10c) returned 1 [0128.255] FindClose (in: hFindFile=0x4fd808 | out: hFindFile=0x4fd808) returned 1 [0128.255] FindNextFileW (in: hFindFile=0x4ec7b8, lpFindFileData=0x24bf660 | out: lpFindFileData=0x24bf660) returned 1 [0128.255] lstrcmpiW (lpString1="el-GR", lpString2="Windows") returned -1 [0128.255] lstrcmpiW (lpString1="el-GR", lpString2="$Recycle.bin") returned 1 [0128.255] lstrcmpiW (lpString1="el-GR", lpString2="System Volume Information") returned -1 [0128.255] wnsprintfW (in: pszDest=0x4dc7b0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\el-GR") returned 17 [0128.255] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\el-GR\\*") returned 19 [0128.255] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\el-GR\\*", lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 0x4fd808 [0128.255] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1 [0128.255] lstrcmpiW (lpString1=".", lpString2="$Recycle.bin") returned 1 [0128.255] lstrcmpiW (lpString1=".", lpString2="System Volume Information") returned -1 [0128.255] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\el-GR\\.") returned 19 [0128.255] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0128.256] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1 [0128.256] lstrcmpiW (lpString1="..", lpString2="$Recycle.bin") returned 1 [0128.256] lstrcmpiW (lpString1="..", lpString2="System Volume Information") returned -1 [0128.256] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\el-GR\\..") returned 20 [0128.256] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0128.256] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="Windows") returned -1 [0128.256] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="$Recycle.bin") returned 1 [0128.256] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="System Volume Information") returned -1 [0128.256] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui") returned 33 [0128.256] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch=".CORP") returned 0x0 [0128.256] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui\r\n") returned 59 [0128.256] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3b, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3b, lpOverlapped=0x0) returned 1 [0128.256] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.257] GetLastError () returned 0x5 [0128.257] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Can't open file (Error: %d): %S\r\n" | out: pszDest="Can't open file (Error: 5): \\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui\r\n") returned 63 [0128.257] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3f, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3f, lpOverlapped=0x0) returned 1 [0128.257] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 0 [0128.258] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\el-GR\\$%%! NOTE ABOUT FILES -=!-.html") returned 49 [0128.258] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\$%%! NOTE ABOUT FILES -=!-.html" (normalized: "c:\\boot\\el-gr\\$%%! note about files -=!-.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0128.258] WriteFile (in: hFile=0x10c, lpBuffer=0x85018*, nNumberOfBytesToWrite=0x647, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85018*, lpNumberOfBytesWritten=0x24bf3a0*=0x647, lpOverlapped=0x0) returned 1 [0128.259] WriteFile (in: hFile=0x10c, lpBuffer=0x8655c*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x8655c*, lpNumberOfBytesWritten=0x24bf3a0*=0x10, lpOverlapped=0x0) returned 1 [0128.259] WriteFile (in: hFile=0x10c, lpBuffer=0x85660*, nNumberOfBytesToWrite=0x5ac, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85660*, lpNumberOfBytesWritten=0x24bf3a0*=0x5ac, lpOverlapped=0x0) returned 1 [0128.259] WriteFile (in: hFile=0x10c, lpBuffer=0x4c4f9a*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x4c4f9a*, lpNumberOfBytesWritten=0x24bf3a0*=0x11, lpOverlapped=0x0) returned 1 [0128.259] WriteFile (in: hFile=0x10c, lpBuffer=0x85c10*, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85c10*, lpNumberOfBytesWritten=0x24bf3a0*=0x62, lpOverlapped=0x0) returned 1 [0128.259] WriteFile (in: hFile=0x10c, lpBuffer=0x4c4fcc*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x4c4fcc*, lpNumberOfBytesWritten=0x24bf3a0*=0x11, lpOverlapped=0x0) returned 1 [0128.259] WriteFile (in: hFile=0x10c, lpBuffer=0x85c78*, nNumberOfBytesToWrite=0x2af, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85c78*, lpNumberOfBytesWritten=0x24bf3a0*=0x2af, lpOverlapped=0x0) returned 1 [0128.259] CloseHandle (hObject=0x10c) returned 1 [0128.259] FindClose (in: hFindFile=0x4fd808 | out: hFindFile=0x4fd808) returned 1 [0128.259] FindNextFileW (in: hFindFile=0x4ec7b8, lpFindFileData=0x24bf660 | out: lpFindFileData=0x24bf660) returned 1 [0128.260] lstrcmpiW (lpString1="en-US", lpString2="Windows") returned -1 [0128.260] lstrcmpiW (lpString1="en-US", lpString2="$Recycle.bin") returned 1 [0128.260] lstrcmpiW (lpString1="en-US", lpString2="System Volume Information") returned -1 [0128.260] wnsprintfW (in: pszDest=0x4dc7b0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\en-US") returned 17 [0128.260] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\en-US\\*") returned 19 [0128.260] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\en-US\\*", lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 0x4fd808 [0128.260] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1 [0128.260] lstrcmpiW (lpString1=".", lpString2="$Recycle.bin") returned 1 [0128.260] lstrcmpiW (lpString1=".", lpString2="System Volume Information") returned -1 [0128.260] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\en-US\\.") returned 19 [0128.260] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0128.260] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1 [0128.260] lstrcmpiW (lpString1="..", lpString2="$Recycle.bin") returned 1 [0128.260] lstrcmpiW (lpString1="..", lpString2="System Volume Information") returned -1 [0128.260] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\en-US\\..") returned 20 [0128.260] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0128.260] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="Windows") returned -1 [0128.260] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="$Recycle.bin") returned 1 [0128.260] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="System Volume Information") returned -1 [0128.260] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui") returned 33 [0128.260] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch=".CORP") returned 0x0 [0128.260] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui\r\n") returned 59 [0128.260] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3b, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3b, lpOverlapped=0x0) returned 1 [0128.261] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.261] GetLastError () returned 0x5 [0128.261] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Can't open file (Error: %d): %S\r\n" | out: pszDest="Can't open file (Error: 5): \\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui\r\n") returned 63 [0128.261] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3f, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3f, lpOverlapped=0x0) returned 1 [0128.261] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0128.261] lstrcmpiW (lpString1="memtest.exe.mui", lpString2="Windows") returned -1 [0128.261] lstrcmpiW (lpString1="memtest.exe.mui", lpString2="$Recycle.bin") returned 1 [0128.261] lstrcmpiW (lpString1="memtest.exe.mui", lpString2="System Volume Information") returned -1 [0128.261] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui") returned 33 [0128.261] StrStrIW (lpFirst="memtest.exe.mui", lpSrch=".CORP") returned 0x0 [0128.261] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\Boot\\en-US\\memtest.exe.mui\r\n") returned 59 [0128.261] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3b, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3b, lpOverlapped=0x0) returned 1 [0128.261] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.261] GetLastError () returned 0x5 [0128.261] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Can't open file (Error: %d): %S\r\n" | out: pszDest="Can't open file (Error: 5): \\\\?\\C:\\Boot\\en-US\\memtest.exe.mui\r\n") returned 63 [0128.261] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3f, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3f, lpOverlapped=0x0) returned 1 [0128.261] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 0 [0128.261] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\en-US\\$%%! NOTE ABOUT FILES -=!-.html") returned 49 [0128.261] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-US\\$%%! NOTE ABOUT FILES -=!-.html" (normalized: "c:\\boot\\en-us\\$%%! note about files -=!-.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0128.351] WriteFile (in: hFile=0x10c, lpBuffer=0x85018*, nNumberOfBytesToWrite=0x647, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85018*, lpNumberOfBytesWritten=0x24bf3a0*=0x647, lpOverlapped=0x0) returned 1 [0128.352] WriteFile (in: hFile=0x10c, lpBuffer=0x8655c*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x8655c*, lpNumberOfBytesWritten=0x24bf3a0*=0x10, lpOverlapped=0x0) returned 1 [0128.352] WriteFile (in: hFile=0x10c, lpBuffer=0x85660*, nNumberOfBytesToWrite=0x5ac, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85660*, lpNumberOfBytesWritten=0x24bf3a0*=0x5ac, lpOverlapped=0x0) returned 1 [0128.352] WriteFile (in: hFile=0x10c, lpBuffer=0x4c4f9a*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x4c4f9a*, lpNumberOfBytesWritten=0x24bf3a0*=0x11, lpOverlapped=0x0) returned 1 [0128.353] WriteFile (in: hFile=0x10c, lpBuffer=0x85c10*, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85c10*, lpNumberOfBytesWritten=0x24bf3a0*=0x62, lpOverlapped=0x0) returned 1 [0128.353] WriteFile (in: hFile=0x10c, lpBuffer=0x4c4fcc*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x4c4fcc*, lpNumberOfBytesWritten=0x24bf3a0*=0x11, lpOverlapped=0x0) returned 1 [0128.353] WriteFile (in: hFile=0x10c, lpBuffer=0x85c78*, nNumberOfBytesToWrite=0x2af, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85c78*, lpNumberOfBytesWritten=0x24bf3a0*=0x2af, lpOverlapped=0x0) returned 1 [0128.353] CloseHandle (hObject=0x10c) returned 1 [0128.353] FindClose (in: hFindFile=0x4fd808 | out: hFindFile=0x4fd808) returned 1 [0128.353] FindNextFileW (in: hFindFile=0x4ec7b8, lpFindFileData=0x24bf660 | out: lpFindFileData=0x24bf660) returned 1 [0128.353] lstrcmpiW (lpString1="es-ES", lpString2="Windows") returned -1 [0128.353] lstrcmpiW (lpString1="es-ES", lpString2="$Recycle.bin") returned 1 [0128.353] lstrcmpiW (lpString1="es-ES", lpString2="System Volume Information") returned -1 [0128.353] wnsprintfW (in: pszDest=0x4dc7b0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\es-ES") returned 17 [0128.353] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\es-ES\\*") returned 19 [0128.353] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\es-ES\\*", lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 0x4fd808 [0128.354] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1 [0128.354] lstrcmpiW (lpString1=".", lpString2="$Recycle.bin") returned 1 [0128.354] lstrcmpiW (lpString1=".", lpString2="System Volume Information") returned -1 [0128.355] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\es-ES\\.") returned 19 [0128.355] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0128.355] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1 [0128.355] lstrcmpiW (lpString1="..", lpString2="$Recycle.bin") returned 1 [0128.355] lstrcmpiW (lpString1="..", lpString2="System Volume Information") returned -1 [0128.355] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\es-ES\\..") returned 20 [0128.355] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0128.355] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="Windows") returned -1 [0128.355] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="$Recycle.bin") returned 1 [0128.355] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="System Volume Information") returned -1 [0128.355] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui") returned 33 [0128.355] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch=".CORP") returned 0x0 [0128.355] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui\r\n") returned 59 [0128.355] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3b, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3b, lpOverlapped=0x0) returned 1 [0128.355] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.355] GetLastError () returned 0x5 [0128.355] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Can't open file (Error: %d): %S\r\n" | out: pszDest="Can't open file (Error: 5): \\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui\r\n") returned 63 [0128.355] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3f, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3f, lpOverlapped=0x0) returned 1 [0128.355] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 0 [0128.355] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\es-ES\\$%%! NOTE ABOUT FILES -=!-.html") returned 49 [0128.355] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\$%%! NOTE ABOUT FILES -=!-.html" (normalized: "c:\\boot\\es-es\\$%%! note about files -=!-.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0128.356] WriteFile (in: hFile=0x10c, lpBuffer=0x85018*, nNumberOfBytesToWrite=0x647, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85018*, lpNumberOfBytesWritten=0x24bf3a0*=0x647, lpOverlapped=0x0) returned 1 [0128.357] WriteFile (in: hFile=0x10c, lpBuffer=0x8655c*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x8655c*, lpNumberOfBytesWritten=0x24bf3a0*=0x10, lpOverlapped=0x0) returned 1 [0128.357] WriteFile (in: hFile=0x10c, lpBuffer=0x85660*, nNumberOfBytesToWrite=0x5ac, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85660*, lpNumberOfBytesWritten=0x24bf3a0*=0x5ac, lpOverlapped=0x0) returned 1 [0128.357] WriteFile (in: hFile=0x10c, lpBuffer=0x4c4f9a*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x4c4f9a*, lpNumberOfBytesWritten=0x24bf3a0*=0x11, lpOverlapped=0x0) returned 1 [0128.357] WriteFile (in: hFile=0x10c, lpBuffer=0x85c10*, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85c10*, lpNumberOfBytesWritten=0x24bf3a0*=0x62, lpOverlapped=0x0) returned 1 [0128.357] WriteFile (in: hFile=0x10c, lpBuffer=0x4c4fcc*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x4c4fcc*, lpNumberOfBytesWritten=0x24bf3a0*=0x11, lpOverlapped=0x0) returned 1 [0128.357] WriteFile (in: hFile=0x10c, lpBuffer=0x85c78*, nNumberOfBytesToWrite=0x2af, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85c78*, lpNumberOfBytesWritten=0x24bf3a0*=0x2af, lpOverlapped=0x0) returned 1 [0128.357] CloseHandle (hObject=0x10c) returned 1 [0128.358] FindClose (in: hFindFile=0x4fd808 | out: hFindFile=0x4fd808) returned 1 [0128.358] FindNextFileW (in: hFindFile=0x4ec7b8, lpFindFileData=0x24bf660 | out: lpFindFileData=0x24bf660) returned 1 [0128.358] lstrcmpiW (lpString1="fi-FI", lpString2="Windows") returned -1 [0128.358] lstrcmpiW (lpString1="fi-FI", lpString2="$Recycle.bin") returned 1 [0128.358] lstrcmpiW (lpString1="fi-FI", lpString2="System Volume Information") returned -1 [0128.358] wnsprintfW (in: pszDest=0x4dc7b0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\fi-FI") returned 17 [0128.358] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\fi-FI\\*") returned 19 [0128.358] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fi-FI\\*", lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 0x4fd808 [0128.358] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1 [0128.358] lstrcmpiW (lpString1=".", lpString2="$Recycle.bin") returned 1 [0128.358] lstrcmpiW (lpString1=".", lpString2="System Volume Information") returned -1 [0128.358] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\fi-FI\\.") returned 19 [0128.358] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0128.358] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1 [0128.358] lstrcmpiW (lpString1="..", lpString2="$Recycle.bin") returned 1 [0128.358] lstrcmpiW (lpString1="..", lpString2="System Volume Information") returned -1 [0128.358] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\fi-FI\\..") returned 20 [0128.358] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0128.358] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="Windows") returned -1 [0128.359] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="$Recycle.bin") returned 1 [0128.359] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="System Volume Information") returned -1 [0128.359] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui") returned 33 [0128.359] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch=".CORP") returned 0x0 [0128.359] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui\r\n") returned 59 [0128.359] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3b, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3b, lpOverlapped=0x0) returned 1 [0128.359] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.359] GetLastError () returned 0x5 [0128.359] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Can't open file (Error: %d): %S\r\n" | out: pszDest="Can't open file (Error: 5): \\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui\r\n") returned 63 [0128.359] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3f, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3f, lpOverlapped=0x0) returned 1 [0128.359] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 0 [0128.359] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\fi-FI\\$%%! NOTE ABOUT FILES -=!-.html") returned 49 [0128.359] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\$%%! NOTE ABOUT FILES -=!-.html" (normalized: "c:\\boot\\fi-fi\\$%%! note about files -=!-.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0128.359] WriteFile (in: hFile=0x10c, lpBuffer=0x85018*, nNumberOfBytesToWrite=0x647, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85018*, lpNumberOfBytesWritten=0x24bf3a0*=0x647, lpOverlapped=0x0) returned 1 [0128.361] WriteFile (in: hFile=0x10c, lpBuffer=0x8655c*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x8655c*, lpNumberOfBytesWritten=0x24bf3a0*=0x10, lpOverlapped=0x0) returned 1 [0128.361] WriteFile (in: hFile=0x10c, lpBuffer=0x85660*, nNumberOfBytesToWrite=0x5ac, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85660*, lpNumberOfBytesWritten=0x24bf3a0*=0x5ac, lpOverlapped=0x0) returned 1 [0128.361] WriteFile (in: hFile=0x10c, lpBuffer=0x4c4f9a*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x4c4f9a*, lpNumberOfBytesWritten=0x24bf3a0*=0x11, lpOverlapped=0x0) returned 1 [0128.361] WriteFile (in: hFile=0x10c, lpBuffer=0x85c10*, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85c10*, lpNumberOfBytesWritten=0x24bf3a0*=0x62, lpOverlapped=0x0) returned 1 [0128.361] WriteFile (in: hFile=0x10c, lpBuffer=0x4c4fcc*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x4c4fcc*, lpNumberOfBytesWritten=0x24bf3a0*=0x11, lpOverlapped=0x0) returned 1 [0128.361] WriteFile (in: hFile=0x10c, lpBuffer=0x85c78*, nNumberOfBytesToWrite=0x2af, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85c78*, lpNumberOfBytesWritten=0x24bf3a0*=0x2af, lpOverlapped=0x0) returned 1 [0128.361] CloseHandle (hObject=0x10c) returned 1 [0128.361] FindClose (in: hFindFile=0x4fd808 | out: hFindFile=0x4fd808) returned 1 [0128.361] FindNextFileW (in: hFindFile=0x4ec7b8, lpFindFileData=0x24bf660 | out: lpFindFileData=0x24bf660) returned 1 [0128.361] lstrcmpiW (lpString1="Fonts", lpString2="Windows") returned -1 [0128.361] lstrcmpiW (lpString1="Fonts", lpString2="$Recycle.bin") returned 1 [0128.362] lstrcmpiW (lpString1="Fonts", lpString2="System Volume Information") returned -1 [0128.362] wnsprintfW (in: pszDest=0x4dc7b0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\Fonts") returned 17 [0128.362] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\Fonts\\*") returned 19 [0128.362] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Fonts\\*", lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 0x4fd808 [0128.371] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1 [0128.371] lstrcmpiW (lpString1=".", lpString2="$Recycle.bin") returned 1 [0128.371] lstrcmpiW (lpString1=".", lpString2="System Volume Information") returned -1 [0128.371] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\Fonts\\.") returned 19 [0128.371] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0128.371] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1 [0128.371] lstrcmpiW (lpString1="..", lpString2="$Recycle.bin") returned 1 [0128.371] lstrcmpiW (lpString1="..", lpString2="System Volume Information") returned -1 [0128.371] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\Fonts\\..") returned 20 [0128.371] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0128.371] lstrcmpiW (lpString1="chs_boot.ttf", lpString2="Windows") returned -1 [0128.371] lstrcmpiW (lpString1="chs_boot.ttf", lpString2="$Recycle.bin") returned 1 [0128.371] lstrcmpiW (lpString1="chs_boot.ttf", lpString2="System Volume Information") returned -1 [0128.371] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf") returned 30 [0128.371] StrStrIW (lpFirst="chs_boot.ttf", lpSrch=".CORP") returned 0x0 [0128.371] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf\r\n") returned 56 [0128.372] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x38, lpOverlapped=0x0) returned 1 [0128.372] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.372] GetLastError () returned 0x5 [0128.372] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Can't open file (Error: %d): %S\r\n" | out: pszDest="Can't open file (Error: 5): \\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf\r\n") returned 60 [0128.372] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3c, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3c, lpOverlapped=0x0) returned 1 [0128.372] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0128.372] lstrcmpiW (lpString1="cht_boot.ttf", lpString2="Windows") returned -1 [0128.372] lstrcmpiW (lpString1="cht_boot.ttf", lpString2="$Recycle.bin") returned 1 [0128.372] lstrcmpiW (lpString1="cht_boot.ttf", lpString2="System Volume Information") returned -1 [0128.372] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf") returned 30 [0128.372] StrStrIW (lpFirst="cht_boot.ttf", lpSrch=".CORP") returned 0x0 [0128.372] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf\r\n") returned 56 [0128.372] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x38, lpOverlapped=0x0) returned 1 [0128.372] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.380] GetLastError () returned 0x5 [0128.380] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Can't open file (Error: %d): %S\r\n" | out: pszDest="Can't open file (Error: 5): \\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf\r\n") returned 60 [0128.381] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3c, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3c, lpOverlapped=0x0) returned 1 [0128.381] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0128.381] lstrcmpiW (lpString1="jpn_boot.ttf", lpString2="Windows") returned -1 [0128.381] lstrcmpiW (lpString1="jpn_boot.ttf", lpString2="$Recycle.bin") returned 1 [0128.381] lstrcmpiW (lpString1="jpn_boot.ttf", lpString2="System Volume Information") returned -1 [0128.381] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf") returned 30 [0128.381] StrStrIW (lpFirst="jpn_boot.ttf", lpSrch=".CORP") returned 0x0 [0128.381] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf\r\n") returned 56 [0128.381] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x38, lpOverlapped=0x0) returned 1 [0128.381] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.381] GetLastError () returned 0x5 [0128.381] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Can't open file (Error: %d): %S\r\n" | out: pszDest="Can't open file (Error: 5): \\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf\r\n") returned 60 [0128.381] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3c, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3c, lpOverlapped=0x0) returned 1 [0128.381] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0128.381] lstrcmpiW (lpString1="kor_boot.ttf", lpString2="Windows") returned -1 [0128.382] lstrcmpiW (lpString1="kor_boot.ttf", lpString2="$Recycle.bin") returned 1 [0128.382] lstrcmpiW (lpString1="kor_boot.ttf", lpString2="System Volume Information") returned -1 [0128.382] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf") returned 30 [0128.382] StrStrIW (lpFirst="kor_boot.ttf", lpSrch=".CORP") returned 0x0 [0128.382] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf\r\n") returned 56 [0128.382] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x38, lpOverlapped=0x0) returned 1 [0128.382] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.382] GetLastError () returned 0x5 [0128.382] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Can't open file (Error: %d): %S\r\n" | out: pszDest="Can't open file (Error: 5): \\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf\r\n") returned 60 [0128.382] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3c, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3c, lpOverlapped=0x0) returned 1 [0128.382] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0128.382] lstrcmpiW (lpString1="wgl4_boot.ttf", lpString2="Windows") returned -1 [0128.382] lstrcmpiW (lpString1="wgl4_boot.ttf", lpString2="$Recycle.bin") returned 1 [0128.382] lstrcmpiW (lpString1="wgl4_boot.ttf", lpString2="System Volume Information") returned 1 [0128.382] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf") returned 31 [0128.382] StrStrIW (lpFirst="wgl4_boot.ttf", lpSrch=".CORP") returned 0x0 [0128.382] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf\r\n") returned 57 [0128.382] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x39, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x39, lpOverlapped=0x0) returned 1 [0128.382] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.382] GetLastError () returned 0x5 [0128.383] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Can't open file (Error: %d): %S\r\n" | out: pszDest="Can't open file (Error: 5): \\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf\r\n") returned 61 [0128.383] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3d, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3d, lpOverlapped=0x0) returned 1 [0128.383] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 0 [0128.383] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\Fonts\\$%%! NOTE ABOUT FILES -=!-.html") returned 49 [0128.383] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\$%%! NOTE ABOUT FILES -=!-.html" (normalized: "c:\\boot\\fonts\\$%%! note about files -=!-.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0128.385] WriteFile (in: hFile=0x10c, lpBuffer=0x85018*, nNumberOfBytesToWrite=0x647, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85018*, lpNumberOfBytesWritten=0x24bf3a0*=0x647, lpOverlapped=0x0) returned 1 [0128.386] WriteFile (in: hFile=0x10c, lpBuffer=0x8655c*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x8655c*, lpNumberOfBytesWritten=0x24bf3a0*=0x10, lpOverlapped=0x0) returned 1 [0128.386] WriteFile (in: hFile=0x10c, lpBuffer=0x85660*, nNumberOfBytesToWrite=0x5ac, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85660*, lpNumberOfBytesWritten=0x24bf3a0*=0x5ac, lpOverlapped=0x0) returned 1 [0128.386] WriteFile (in: hFile=0x10c, lpBuffer=0x4c4f9a*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x4c4f9a*, lpNumberOfBytesWritten=0x24bf3a0*=0x11, lpOverlapped=0x0) returned 1 [0128.386] WriteFile (in: hFile=0x10c, lpBuffer=0x85c10*, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85c10*, lpNumberOfBytesWritten=0x24bf3a0*=0x62, lpOverlapped=0x0) returned 1 [0128.386] WriteFile (in: hFile=0x10c, lpBuffer=0x4c4fcc*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x4c4fcc*, lpNumberOfBytesWritten=0x24bf3a0*=0x11, lpOverlapped=0x0) returned 1 [0128.386] WriteFile (in: hFile=0x10c, lpBuffer=0x85c78*, nNumberOfBytesToWrite=0x2af, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85c78*, lpNumberOfBytesWritten=0x24bf3a0*=0x2af, lpOverlapped=0x0) returned 1 [0128.386] CloseHandle (hObject=0x10c) returned 1 [0128.386] FindClose (in: hFindFile=0x4fd808 | out: hFindFile=0x4fd808) returned 1 [0128.387] FindNextFileW (in: hFindFile=0x4ec7b8, lpFindFileData=0x24bf660 | out: lpFindFileData=0x24bf660) returned 1 [0128.387] lstrcmpiW (lpString1="fr-FR", lpString2="Windows") returned -1 [0128.387] lstrcmpiW (lpString1="fr-FR", lpString2="$Recycle.bin") returned 1 [0128.387] lstrcmpiW (lpString1="fr-FR", lpString2="System Volume Information") returned -1 [0128.387] wnsprintfW (in: pszDest=0x4dc7b0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\fr-FR") returned 17 [0128.387] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\fr-FR\\*") returned 19 [0128.387] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fr-FR\\*", lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 0x4fd808 [0128.393] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1 [0128.394] lstrcmpiW (lpString1=".", lpString2="$Recycle.bin") returned 1 [0128.394] lstrcmpiW (lpString1=".", lpString2="System Volume Information") returned -1 [0128.394] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\fr-FR\\.") returned 19 [0128.394] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0128.394] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1 [0128.394] lstrcmpiW (lpString1="..", lpString2="$Recycle.bin") returned 1 [0128.394] lstrcmpiW (lpString1="..", lpString2="System Volume Information") returned -1 [0128.394] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\fr-FR\\..") returned 20 [0128.394] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0128.394] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="Windows") returned -1 [0128.394] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="$Recycle.bin") returned 1 [0128.394] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="System Volume Information") returned -1 [0128.394] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui") returned 33 [0128.394] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch=".CORP") returned 0x0 [0128.394] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui\r\n") returned 59 [0128.394] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3b, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3b, lpOverlapped=0x0) returned 1 [0128.394] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.394] GetLastError () returned 0x5 [0128.394] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Can't open file (Error: %d): %S\r\n" | out: pszDest="Can't open file (Error: 5): \\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui\r\n") returned 63 [0128.394] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3f, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3f, lpOverlapped=0x0) returned 1 [0128.394] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 0 [0128.394] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\fr-FR\\$%%! NOTE ABOUT FILES -=!-.html") returned 49 [0128.394] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\$%%! NOTE ABOUT FILES -=!-.html" (normalized: "c:\\boot\\fr-fr\\$%%! note about files -=!-.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0128.395] WriteFile (in: hFile=0x10c, lpBuffer=0x85018*, nNumberOfBytesToWrite=0x647, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85018*, lpNumberOfBytesWritten=0x24bf3a0*=0x647, lpOverlapped=0x0) returned 1 [0128.396] WriteFile (in: hFile=0x10c, lpBuffer=0x8655c*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x8655c*, lpNumberOfBytesWritten=0x24bf3a0*=0x10, lpOverlapped=0x0) returned 1 [0128.396] WriteFile (in: hFile=0x10c, lpBuffer=0x85660*, nNumberOfBytesToWrite=0x5ac, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85660*, lpNumberOfBytesWritten=0x24bf3a0*=0x5ac, lpOverlapped=0x0) returned 1 [0128.396] WriteFile (in: hFile=0x10c, lpBuffer=0x4c4f9a*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x4c4f9a*, lpNumberOfBytesWritten=0x24bf3a0*=0x11, lpOverlapped=0x0) returned 1 [0128.396] WriteFile (in: hFile=0x10c, lpBuffer=0x85c10*, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85c10*, lpNumberOfBytesWritten=0x24bf3a0*=0x62, lpOverlapped=0x0) returned 1 [0128.396] WriteFile (in: hFile=0x10c, lpBuffer=0x4c4fcc*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x4c4fcc*, lpNumberOfBytesWritten=0x24bf3a0*=0x11, lpOverlapped=0x0) returned 1 [0128.396] WriteFile (in: hFile=0x10c, lpBuffer=0x85c78*, nNumberOfBytesToWrite=0x2af, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85c78*, lpNumberOfBytesWritten=0x24bf3a0*=0x2af, lpOverlapped=0x0) returned 1 [0128.396] CloseHandle (hObject=0x10c) returned 1 [0128.396] FindClose (in: hFindFile=0x4fd808 | out: hFindFile=0x4fd808) returned 1 [0128.397] FindNextFileW (in: hFindFile=0x4ec7b8, lpFindFileData=0x24bf660 | out: lpFindFileData=0x24bf660) returned 1 [0128.397] lstrcmpiW (lpString1="hu-HU", lpString2="Windows") returned -1 [0128.397] lstrcmpiW (lpString1="hu-HU", lpString2="$Recycle.bin") returned 1 [0128.397] lstrcmpiW (lpString1="hu-HU", lpString2="System Volume Information") returned -1 [0128.397] wnsprintfW (in: pszDest=0x4dc7b0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\hu-HU") returned 17 [0128.397] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\hu-HU\\*") returned 19 [0128.397] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\hu-HU\\*", lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 0x4fd808 [0128.397] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1 [0128.397] lstrcmpiW (lpString1=".", lpString2="$Recycle.bin") returned 1 [0128.397] lstrcmpiW (lpString1=".", lpString2="System Volume Information") returned -1 [0128.397] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\hu-HU\\.") returned 19 [0128.397] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0128.397] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1 [0128.397] lstrcmpiW (lpString1="..", lpString2="$Recycle.bin") returned 1 [0128.397] lstrcmpiW (lpString1="..", lpString2="System Volume Information") returned -1 [0128.397] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\hu-HU\\..") returned 20 [0128.397] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0128.397] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="Windows") returned -1 [0128.397] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="$Recycle.bin") returned 1 [0128.397] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="System Volume Information") returned -1 [0128.397] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui") returned 33 [0128.398] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch=".CORP") returned 0x0 [0128.398] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui\r\n") returned 59 [0128.398] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3b, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3b, lpOverlapped=0x0) returned 1 [0128.398] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.398] GetLastError () returned 0x5 [0128.398] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Can't open file (Error: %d): %S\r\n" | out: pszDest="Can't open file (Error: 5): \\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui\r\n") returned 63 [0128.398] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3f, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3f, lpOverlapped=0x0) returned 1 [0128.398] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 0 [0128.398] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\hu-HU\\$%%! NOTE ABOUT FILES -=!-.html") returned 49 [0128.398] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\$%%! NOTE ABOUT FILES -=!-.html" (normalized: "c:\\boot\\hu-hu\\$%%! note about files -=!-.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0128.398] WriteFile (in: hFile=0x10c, lpBuffer=0x85018*, nNumberOfBytesToWrite=0x647, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85018*, lpNumberOfBytesWritten=0x24bf3a0*=0x647, lpOverlapped=0x0) returned 1 [0128.489] WriteFile (in: hFile=0x10c, lpBuffer=0x8655c*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x8655c*, lpNumberOfBytesWritten=0x24bf3a0*=0x10, lpOverlapped=0x0) returned 1 [0128.489] WriteFile (in: hFile=0x10c, lpBuffer=0x85660*, nNumberOfBytesToWrite=0x5ac, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85660*, lpNumberOfBytesWritten=0x24bf3a0*=0x5ac, lpOverlapped=0x0) returned 1 [0128.489] WriteFile (in: hFile=0x10c, lpBuffer=0x4c4f9a*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x4c4f9a*, lpNumberOfBytesWritten=0x24bf3a0*=0x11, lpOverlapped=0x0) returned 1 [0128.489] WriteFile (in: hFile=0x10c, lpBuffer=0x85c10*, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85c10*, lpNumberOfBytesWritten=0x24bf3a0*=0x62, lpOverlapped=0x0) returned 1 [0128.489] WriteFile (in: hFile=0x10c, lpBuffer=0x4c4fcc*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x4c4fcc*, lpNumberOfBytesWritten=0x24bf3a0*=0x11, lpOverlapped=0x0) returned 1 [0128.489] WriteFile (in: hFile=0x10c, lpBuffer=0x85c78*, nNumberOfBytesToWrite=0x2af, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85c78*, lpNumberOfBytesWritten=0x24bf3a0*=0x2af, lpOverlapped=0x0) returned 1 [0128.489] CloseHandle (hObject=0x10c) returned 1 [0128.489] FindClose (in: hFindFile=0x4fd808 | out: hFindFile=0x4fd808) returned 1 [0128.489] FindNextFileW (in: hFindFile=0x4ec7b8, lpFindFileData=0x24bf660 | out: lpFindFileData=0x24bf660) returned 1 [0128.489] lstrcmpiW (lpString1="it-IT", lpString2="Windows") returned -1 [0128.489] lstrcmpiW (lpString1="it-IT", lpString2="$Recycle.bin") returned 1 [0128.489] lstrcmpiW (lpString1="it-IT", lpString2="System Volume Information") returned -1 [0128.490] wnsprintfW (in: pszDest=0x4dc7b0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\it-IT") returned 17 [0128.490] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\it-IT\\*") returned 19 [0128.490] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\it-IT\\*", lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 0x4fd808 [0129.531] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1 [0129.531] lstrcmpiW (lpString1=".", lpString2="$Recycle.bin") returned 1 [0129.531] lstrcmpiW (lpString1=".", lpString2="System Volume Information") returned -1 [0129.531] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\it-IT\\.") returned 19 [0129.531] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0129.531] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1 [0129.532] lstrcmpiW (lpString1="..", lpString2="$Recycle.bin") returned 1 [0129.532] lstrcmpiW (lpString1="..", lpString2="System Volume Information") returned -1 [0129.532] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\it-IT\\..") returned 20 [0129.532] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0129.532] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="Windows") returned -1 [0129.532] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="$Recycle.bin") returned 1 [0129.532] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="System Volume Information") returned -1 [0129.532] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui") returned 33 [0129.532] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch=".CORP") returned 0x0 [0129.532] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui\r\n") returned 59 [0129.532] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3b, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3b, lpOverlapped=0x0) returned 1 [0129.532] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.532] GetLastError () returned 0x5 [0129.532] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Can't open file (Error: %d): %S\r\n" | out: pszDest="Can't open file (Error: 5): \\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui\r\n") returned 63 [0129.532] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3f, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3f, lpOverlapped=0x0) returned 1 [0129.532] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 0 [0129.532] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\it-IT\\$%%! NOTE ABOUT FILES -=!-.html") returned 49 [0129.532] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\$%%! NOTE ABOUT FILES -=!-.html" (normalized: "c:\\boot\\it-it\\$%%! note about files -=!-.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0129.534] WriteFile (in: hFile=0x10c, lpBuffer=0x85018*, nNumberOfBytesToWrite=0x647, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85018*, lpNumberOfBytesWritten=0x24bf3a0*=0x647, lpOverlapped=0x0) returned 1 [0129.535] WriteFile (in: hFile=0x10c, lpBuffer=0x8655c*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x8655c*, lpNumberOfBytesWritten=0x24bf3a0*=0x10, lpOverlapped=0x0) returned 1 [0129.535] WriteFile (in: hFile=0x10c, lpBuffer=0x85660*, nNumberOfBytesToWrite=0x5ac, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85660*, lpNumberOfBytesWritten=0x24bf3a0*=0x5ac, lpOverlapped=0x0) returned 1 [0129.535] WriteFile (in: hFile=0x10c, lpBuffer=0x4c4f9a*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x4c4f9a*, lpNumberOfBytesWritten=0x24bf3a0*=0x11, lpOverlapped=0x0) returned 1 [0129.535] WriteFile (in: hFile=0x10c, lpBuffer=0x85c10*, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85c10*, lpNumberOfBytesWritten=0x24bf3a0*=0x62, lpOverlapped=0x0) returned 1 [0129.536] WriteFile (in: hFile=0x10c, lpBuffer=0x4c4fcc*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x4c4fcc*, lpNumberOfBytesWritten=0x24bf3a0*=0x11, lpOverlapped=0x0) returned 1 [0129.536] WriteFile (in: hFile=0x10c, lpBuffer=0x85c78*, nNumberOfBytesToWrite=0x2af, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85c78*, lpNumberOfBytesWritten=0x24bf3a0*=0x2af, lpOverlapped=0x0) returned 1 [0129.536] CloseHandle (hObject=0x10c) returned 1 [0129.536] FindClose (in: hFindFile=0x4fd808 | out: hFindFile=0x4fd808) returned 1 [0129.536] FindNextFileW (in: hFindFile=0x4ec7b8, lpFindFileData=0x24bf660 | out: lpFindFileData=0x24bf660) returned 1 [0129.536] lstrcmpiW (lpString1="ja-JP", lpString2="Windows") returned -1 [0129.536] lstrcmpiW (lpString1="ja-JP", lpString2="$Recycle.bin") returned 1 [0129.536] lstrcmpiW (lpString1="ja-JP", lpString2="System Volume Information") returned -1 [0129.536] wnsprintfW (in: pszDest=0x4dc7b0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\ja-JP") returned 17 [0129.537] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\ja-JP\\*") returned 19 [0129.537] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ja-JP\\*", lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 0x4fd808 [0129.537] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1 [0129.537] lstrcmpiW (lpString1=".", lpString2="$Recycle.bin") returned 1 [0129.537] lstrcmpiW (lpString1=".", lpString2="System Volume Information") returned -1 [0129.537] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\ja-JP\\.") returned 19 [0129.537] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0129.537] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1 [0129.537] lstrcmpiW (lpString1="..", lpString2="$Recycle.bin") returned 1 [0129.537] lstrcmpiW (lpString1="..", lpString2="System Volume Information") returned -1 [0129.537] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\ja-JP\\..") returned 20 [0129.608] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0129.608] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="Windows") returned -1 [0129.608] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="$Recycle.bin") returned 1 [0129.608] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="System Volume Information") returned -1 [0129.608] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui") returned 33 [0129.608] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch=".CORP") returned 0x0 [0129.609] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui\r\n") returned 59 [0129.609] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3b, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3b, lpOverlapped=0x0) returned 1 [0129.609] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.609] GetLastError () returned 0x5 [0129.609] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Can't open file (Error: %d): %S\r\n" | out: pszDest="Can't open file (Error: 5): \\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui\r\n") returned 63 [0129.609] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3f, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3f, lpOverlapped=0x0) returned 1 [0129.609] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 0 [0129.611] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\ja-JP\\$%%! NOTE ABOUT FILES -=!-.html") returned 49 [0129.611] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\$%%! NOTE ABOUT FILES -=!-.html" (normalized: "c:\\boot\\ja-jp\\$%%! note about files -=!-.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0129.611] WriteFile (in: hFile=0x10c, lpBuffer=0x85018*, nNumberOfBytesToWrite=0x647, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85018*, lpNumberOfBytesWritten=0x24bf3a0*=0x647, lpOverlapped=0x0) returned 1 [0129.612] WriteFile (in: hFile=0x10c, lpBuffer=0x8655c*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x8655c*, lpNumberOfBytesWritten=0x24bf3a0*=0x10, lpOverlapped=0x0) returned 1 [0129.612] WriteFile (in: hFile=0x10c, lpBuffer=0x85660*, nNumberOfBytesToWrite=0x5ac, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85660*, lpNumberOfBytesWritten=0x24bf3a0*=0x5ac, lpOverlapped=0x0) returned 1 [0129.612] WriteFile (in: hFile=0x10c, lpBuffer=0x4c4f9a*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x4c4f9a*, lpNumberOfBytesWritten=0x24bf3a0*=0x11, lpOverlapped=0x0) returned 1 [0129.612] WriteFile (in: hFile=0x10c, lpBuffer=0x85c10*, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85c10*, lpNumberOfBytesWritten=0x24bf3a0*=0x62, lpOverlapped=0x0) returned 1 [0129.613] WriteFile (in: hFile=0x10c, lpBuffer=0x4c4fcc*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x4c4fcc*, lpNumberOfBytesWritten=0x24bf3a0*=0x11, lpOverlapped=0x0) returned 1 [0129.613] WriteFile (in: hFile=0x10c, lpBuffer=0x85c78*, nNumberOfBytesToWrite=0x2af, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85c78*, lpNumberOfBytesWritten=0x24bf3a0*=0x2af, lpOverlapped=0x0) returned 1 [0129.613] CloseHandle (hObject=0x10c) returned 1 [0129.613] FindClose (in: hFindFile=0x4fd808 | out: hFindFile=0x4fd808) returned 1 [0129.613] FindNextFileW (in: hFindFile=0x4ec7b8, lpFindFileData=0x24bf660 | out: lpFindFileData=0x24bf660) returned 1 [0129.613] lstrcmpiW (lpString1="ko-KR", lpString2="Windows") returned -1 [0129.613] lstrcmpiW (lpString1="ko-KR", lpString2="$Recycle.bin") returned 1 [0129.613] lstrcmpiW (lpString1="ko-KR", lpString2="System Volume Information") returned -1 [0129.613] wnsprintfW (in: pszDest=0x4dc7b0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\ko-KR") returned 17 [0129.614] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\ko-KR\\*") returned 19 [0129.614] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ko-KR\\*", lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 0x4fd808 [0129.615] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1 [0129.615] lstrcmpiW (lpString1=".", lpString2="$Recycle.bin") returned 1 [0129.615] lstrcmpiW (lpString1=".", lpString2="System Volume Information") returned -1 [0129.615] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\ko-KR\\.") returned 19 [0129.615] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0129.615] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1 [0129.615] lstrcmpiW (lpString1="..", lpString2="$Recycle.bin") returned 1 [0129.615] lstrcmpiW (lpString1="..", lpString2="System Volume Information") returned -1 [0129.615] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\ko-KR\\..") returned 20 [0129.615] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0129.615] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="Windows") returned -1 [0129.615] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="$Recycle.bin") returned 1 [0129.615] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="System Volume Information") returned -1 [0129.615] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui") returned 33 [0129.615] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch=".CORP") returned 0x0 [0129.616] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui\r\n") returned 59 [0129.616] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3b, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3b, lpOverlapped=0x0) returned 1 [0129.616] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.616] GetLastError () returned 0x5 [0129.616] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Can't open file (Error: %d): %S\r\n" | out: pszDest="Can't open file (Error: 5): \\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui\r\n") returned 63 [0129.616] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3f, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3f, lpOverlapped=0x0) returned 1 [0129.616] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 0 [0129.616] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\ko-KR\\$%%! NOTE ABOUT FILES -=!-.html") returned 49 [0129.616] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\$%%! NOTE ABOUT FILES -=!-.html" (normalized: "c:\\boot\\ko-kr\\$%%! note about files -=!-.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0129.617] WriteFile (in: hFile=0x10c, lpBuffer=0x85018*, nNumberOfBytesToWrite=0x647, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85018*, lpNumberOfBytesWritten=0x24bf3a0*=0x647, lpOverlapped=0x0) returned 1 [0129.618] WriteFile (in: hFile=0x10c, lpBuffer=0x8655c*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x8655c*, lpNumberOfBytesWritten=0x24bf3a0*=0x10, lpOverlapped=0x0) returned 1 [0129.618] WriteFile (in: hFile=0x10c, lpBuffer=0x85660*, nNumberOfBytesToWrite=0x5ac, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85660*, lpNumberOfBytesWritten=0x24bf3a0*=0x5ac, lpOverlapped=0x0) returned 1 [0129.618] WriteFile (in: hFile=0x10c, lpBuffer=0x4c4f9a*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x4c4f9a*, lpNumberOfBytesWritten=0x24bf3a0*=0x11, lpOverlapped=0x0) returned 1 [0129.618] WriteFile (in: hFile=0x10c, lpBuffer=0x85c10*, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85c10*, lpNumberOfBytesWritten=0x24bf3a0*=0x62, lpOverlapped=0x0) returned 1 [0129.618] WriteFile (in: hFile=0x10c, lpBuffer=0x4c4fcc*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x4c4fcc*, lpNumberOfBytesWritten=0x24bf3a0*=0x11, lpOverlapped=0x0) returned 1 [0129.619] WriteFile (in: hFile=0x10c, lpBuffer=0x85c78*, nNumberOfBytesToWrite=0x2af, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85c78*, lpNumberOfBytesWritten=0x24bf3a0*=0x2af, lpOverlapped=0x0) returned 1 [0129.619] CloseHandle (hObject=0x10c) returned 1 [0129.619] FindClose (in: hFindFile=0x4fd808 | out: hFindFile=0x4fd808) returned 1 [0129.619] FindNextFileW (in: hFindFile=0x4ec7b8, lpFindFileData=0x24bf660 | out: lpFindFileData=0x24bf660) returned 1 [0129.619] lstrcmpiW (lpString1="memtest.exe", lpString2="Windows") returned -1 [0129.620] lstrcmpiW (lpString1="memtest.exe", lpString2="$Recycle.bin") returned 1 [0129.620] lstrcmpiW (lpString1="memtest.exe", lpString2="System Volume Information") returned -1 [0129.620] wnsprintfW (in: pszDest=0x4dc7b0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\memtest.exe") returned 23 [0129.620] StrStrIW (lpFirst="memtest.exe", lpSrch=".CORP") returned 0x0 [0129.620] wnsprintfA (in: pszDest=0x24bf1c8, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\Boot\\memtest.exe\r\n") returned 49 [0129.620] WriteFile (in: hFile=0xfc, lpBuffer=0x24bf1c8*, nNumberOfBytesToWrite=0x31, lpNumberOfBytesWritten=0x24bf610, lpOverlapped=0x0 | out: lpBuffer=0x24bf1c8*, lpNumberOfBytesWritten=0x24bf610*=0x31, lpOverlapped=0x0) returned 1 [0129.620] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.620] GetLastError () returned 0x5 [0129.620] wnsprintfA (in: pszDest=0x24bf1c8, cchDest=1024, pszFmt="Can't open file (Error: %d): %S\r\n" | out: pszDest="Can't open file (Error: 5): \\\\?\\C:\\Boot\\memtest.exe\r\n") returned 53 [0129.620] WriteFile (in: hFile=0xfc, lpBuffer=0x24bf1c8*, nNumberOfBytesToWrite=0x35, lpNumberOfBytesWritten=0x24bf610, lpOverlapped=0x0 | out: lpBuffer=0x24bf1c8*, lpNumberOfBytesWritten=0x24bf610*=0x35, lpOverlapped=0x0) returned 1 [0129.620] FindNextFileW (in: hFindFile=0x4ec7b8, lpFindFileData=0x24bf660 | out: lpFindFileData=0x24bf660) returned 1 [0129.620] lstrcmpiW (lpString1="nb-NO", lpString2="Windows") returned -1 [0129.620] lstrcmpiW (lpString1="nb-NO", lpString2="$Recycle.bin") returned 1 [0129.620] lstrcmpiW (lpString1="nb-NO", lpString2="System Volume Information") returned -1 [0129.621] wnsprintfW (in: pszDest=0x4dc7b0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\nb-NO") returned 17 [0129.621] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\nb-NO\\*") returned 19 [0129.621] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nb-NO\\*", lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 0x4fd808 [0129.621] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1 [0129.621] lstrcmpiW (lpString1=".", lpString2="$Recycle.bin") returned 1 [0129.621] lstrcmpiW (lpString1=".", lpString2="System Volume Information") returned -1 [0129.621] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\nb-NO\\.") returned 19 [0129.621] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0129.621] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1 [0129.621] lstrcmpiW (lpString1="..", lpString2="$Recycle.bin") returned 1 [0129.621] lstrcmpiW (lpString1="..", lpString2="System Volume Information") returned -1 [0129.621] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\nb-NO\\..") returned 20 [0129.621] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0129.622] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="Windows") returned -1 [0129.622] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="$Recycle.bin") returned 1 [0129.622] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="System Volume Information") returned -1 [0129.622] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui") returned 33 [0129.622] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch=".CORP") returned 0x0 [0129.622] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui\r\n") returned 59 [0129.622] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3b, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3b, lpOverlapped=0x0) returned 1 [0129.622] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.623] GetLastError () returned 0x5 [0129.623] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Can't open file (Error: %d): %S\r\n" | out: pszDest="Can't open file (Error: 5): \\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui\r\n") returned 63 [0129.623] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3f, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3f, lpOverlapped=0x0) returned 1 [0129.623] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 0 [0129.623] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\nb-NO\\$%%! NOTE ABOUT FILES -=!-.html") returned 49 [0129.623] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\$%%! NOTE ABOUT FILES -=!-.html" (normalized: "c:\\boot\\nb-no\\$%%! note about files -=!-.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0129.623] WriteFile (in: hFile=0x10c, lpBuffer=0x85018*, nNumberOfBytesToWrite=0x647, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85018*, lpNumberOfBytesWritten=0x24bf3a0*=0x647, lpOverlapped=0x0) returned 1 [0129.624] WriteFile (in: hFile=0x10c, lpBuffer=0x8655c*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x8655c*, lpNumberOfBytesWritten=0x24bf3a0*=0x10, lpOverlapped=0x0) returned 1 [0129.625] WriteFile (in: hFile=0x10c, lpBuffer=0x85660*, nNumberOfBytesToWrite=0x5ac, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85660*, lpNumberOfBytesWritten=0x24bf3a0*=0x5ac, lpOverlapped=0x0) returned 1 [0129.625] WriteFile (in: hFile=0x10c, lpBuffer=0x4c4f9a*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x4c4f9a*, lpNumberOfBytesWritten=0x24bf3a0*=0x11, lpOverlapped=0x0) returned 1 [0129.625] WriteFile (in: hFile=0x10c, lpBuffer=0x85c10*, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85c10*, lpNumberOfBytesWritten=0x24bf3a0*=0x62, lpOverlapped=0x0) returned 1 [0129.625] WriteFile (in: hFile=0x10c, lpBuffer=0x4c4fcc*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x4c4fcc*, lpNumberOfBytesWritten=0x24bf3a0*=0x11, lpOverlapped=0x0) returned 1 [0129.625] WriteFile (in: hFile=0x10c, lpBuffer=0x85c78*, nNumberOfBytesToWrite=0x2af, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85c78*, lpNumberOfBytesWritten=0x24bf3a0*=0x2af, lpOverlapped=0x0) returned 1 [0129.625] CloseHandle (hObject=0x10c) returned 1 [0129.625] FindClose (in: hFindFile=0x4fd808 | out: hFindFile=0x4fd808) returned 1 [0129.626] FindNextFileW (in: hFindFile=0x4ec7b8, lpFindFileData=0x24bf660 | out: lpFindFileData=0x24bf660) returned 1 [0129.626] lstrcmpiW (lpString1="nl-NL", lpString2="Windows") returned -1 [0129.626] lstrcmpiW (lpString1="nl-NL", lpString2="$Recycle.bin") returned 1 [0129.626] lstrcmpiW (lpString1="nl-NL", lpString2="System Volume Information") returned -1 [0129.626] wnsprintfW (in: pszDest=0x4dc7b0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\nl-NL") returned 17 [0129.626] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\nl-NL\\*") returned 19 [0129.626] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nl-NL\\*", lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 0x4fd808 [0129.626] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1 [0129.626] lstrcmpiW (lpString1=".", lpString2="$Recycle.bin") returned 1 [0129.626] lstrcmpiW (lpString1=".", lpString2="System Volume Information") returned -1 [0129.626] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\nl-NL\\.") returned 19 [0129.626] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0129.627] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1 [0129.627] lstrcmpiW (lpString1="..", lpString2="$Recycle.bin") returned 1 [0129.627] lstrcmpiW (lpString1="..", lpString2="System Volume Information") returned -1 [0129.627] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\nl-NL\\..") returned 20 [0129.627] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0129.627] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="Windows") returned -1 [0129.627] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="$Recycle.bin") returned 1 [0129.627] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="System Volume Information") returned -1 [0129.627] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui") returned 33 [0129.627] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch=".CORP") returned 0x0 [0129.627] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui\r\n") returned 59 [0129.627] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3b, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3b, lpOverlapped=0x0) returned 1 [0129.627] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.627] GetLastError () returned 0x5 [0129.627] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Can't open file (Error: %d): %S\r\n" | out: pszDest="Can't open file (Error: 5): \\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui\r\n") returned 63 [0129.627] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3f, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3f, lpOverlapped=0x0) returned 1 [0129.628] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 0 [0129.628] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\nl-NL\\$%%! NOTE ABOUT FILES -=!-.html") returned 49 [0129.628] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\$%%! NOTE ABOUT FILES -=!-.html" (normalized: "c:\\boot\\nl-nl\\$%%! note about files -=!-.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0129.628] WriteFile (in: hFile=0x10c, lpBuffer=0x85018*, nNumberOfBytesToWrite=0x647, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85018*, lpNumberOfBytesWritten=0x24bf3a0*=0x647, lpOverlapped=0x0) returned 1 [0129.629] WriteFile (in: hFile=0x10c, lpBuffer=0x8655c*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x8655c*, lpNumberOfBytesWritten=0x24bf3a0*=0x10, lpOverlapped=0x0) returned 1 [0129.629] WriteFile (in: hFile=0x10c, lpBuffer=0x85660*, nNumberOfBytesToWrite=0x5ac, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85660*, lpNumberOfBytesWritten=0x24bf3a0*=0x5ac, lpOverlapped=0x0) returned 1 [0129.629] WriteFile (in: hFile=0x10c, lpBuffer=0x4c4f9a*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x4c4f9a*, lpNumberOfBytesWritten=0x24bf3a0*=0x11, lpOverlapped=0x0) returned 1 [0129.629] WriteFile (in: hFile=0x10c, lpBuffer=0x85c10*, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85c10*, lpNumberOfBytesWritten=0x24bf3a0*=0x62, lpOverlapped=0x0) returned 1 [0129.629] WriteFile (in: hFile=0x10c, lpBuffer=0x4c4fcc*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x4c4fcc*, lpNumberOfBytesWritten=0x24bf3a0*=0x11, lpOverlapped=0x0) returned 1 [0129.630] WriteFile (in: hFile=0x10c, lpBuffer=0x85c78*, nNumberOfBytesToWrite=0x2af, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85c78*, lpNumberOfBytesWritten=0x24bf3a0*=0x2af, lpOverlapped=0x0) returned 1 [0129.630] CloseHandle (hObject=0x10c) returned 1 [0129.630] FindClose (in: hFindFile=0x4fd808 | out: hFindFile=0x4fd808) returned 1 [0129.630] FindNextFileW (in: hFindFile=0x4ec7b8, lpFindFileData=0x24bf660 | out: lpFindFileData=0x24bf660) returned 1 [0129.630] lstrcmpiW (lpString1="pl-PL", lpString2="Windows") returned -1 [0129.630] lstrcmpiW (lpString1="pl-PL", lpString2="$Recycle.bin") returned 1 [0129.630] lstrcmpiW (lpString1="pl-PL", lpString2="System Volume Information") returned -1 [0129.630] wnsprintfW (in: pszDest=0x4dc7b0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\pl-PL") returned 17 [0129.630] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\pl-PL\\*") returned 19 [0129.630] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pl-PL\\*", lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 0x4fd808 [0129.631] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1 [0129.631] lstrcmpiW (lpString1=".", lpString2="$Recycle.bin") returned 1 [0129.631] lstrcmpiW (lpString1=".", lpString2="System Volume Information") returned -1 [0129.631] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\pl-PL\\.") returned 19 [0129.632] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0129.632] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1 [0129.632] lstrcmpiW (lpString1="..", lpString2="$Recycle.bin") returned 1 [0129.632] lstrcmpiW (lpString1="..", lpString2="System Volume Information") returned -1 [0129.632] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\pl-PL\\..") returned 20 [0129.632] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0129.632] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="Windows") returned -1 [0129.632] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="$Recycle.bin") returned 1 [0129.632] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="System Volume Information") returned -1 [0129.632] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui") returned 33 [0129.632] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch=".CORP") returned 0x0 [0129.632] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui\r\n") returned 59 [0129.632] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3b, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3b, lpOverlapped=0x0) returned 1 [0129.632] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.633] GetLastError () returned 0x5 [0129.633] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Can't open file (Error: %d): %S\r\n" | out: pszDest="Can't open file (Error: 5): \\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui\r\n") returned 63 [0129.633] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3f, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3f, lpOverlapped=0x0) returned 1 [0129.633] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 0 [0129.634] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\pl-PL\\$%%! NOTE ABOUT FILES -=!-.html") returned 49 [0129.634] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\$%%! NOTE ABOUT FILES -=!-.html" (normalized: "c:\\boot\\pl-pl\\$%%! note about files -=!-.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0129.634] WriteFile (in: hFile=0x10c, lpBuffer=0x85018*, nNumberOfBytesToWrite=0x647, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85018*, lpNumberOfBytesWritten=0x24bf3a0*=0x647, lpOverlapped=0x0) returned 1 [0129.635] WriteFile (in: hFile=0x10c, lpBuffer=0x8655c*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x8655c*, lpNumberOfBytesWritten=0x24bf3a0*=0x10, lpOverlapped=0x0) returned 1 [0129.635] WriteFile (in: hFile=0x10c, lpBuffer=0x85660*, nNumberOfBytesToWrite=0x5ac, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85660*, lpNumberOfBytesWritten=0x24bf3a0*=0x5ac, lpOverlapped=0x0) returned 1 [0129.635] WriteFile (in: hFile=0x10c, lpBuffer=0x4c4f9a*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x4c4f9a*, lpNumberOfBytesWritten=0x24bf3a0*=0x11, lpOverlapped=0x0) returned 1 [0129.635] WriteFile (in: hFile=0x10c, lpBuffer=0x85c10*, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85c10*, lpNumberOfBytesWritten=0x24bf3a0*=0x62, lpOverlapped=0x0) returned 1 [0129.635] WriteFile (in: hFile=0x10c, lpBuffer=0x4c4fcc*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x4c4fcc*, lpNumberOfBytesWritten=0x24bf3a0*=0x11, lpOverlapped=0x0) returned 1 [0129.635] WriteFile (in: hFile=0x10c, lpBuffer=0x85c78*, nNumberOfBytesToWrite=0x2af, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85c78*, lpNumberOfBytesWritten=0x24bf3a0*=0x2af, lpOverlapped=0x0) returned 1 [0129.636] CloseHandle (hObject=0x10c) returned 1 [0129.636] FindClose (in: hFindFile=0x4fd808 | out: hFindFile=0x4fd808) returned 1 [0129.636] FindNextFileW (in: hFindFile=0x4ec7b8, lpFindFileData=0x24bf660 | out: lpFindFileData=0x24bf660) returned 1 [0129.636] lstrcmpiW (lpString1="pt-BR", lpString2="Windows") returned -1 [0129.636] lstrcmpiW (lpString1="pt-BR", lpString2="$Recycle.bin") returned 1 [0129.636] lstrcmpiW (lpString1="pt-BR", lpString2="System Volume Information") returned -1 [0129.636] wnsprintfW (in: pszDest=0x4dc7b0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\pt-BR") returned 17 [0129.636] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\pt-BR\\*") returned 19 [0129.636] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-BR\\*", lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 0x4fd808 [0129.637] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1 [0129.637] lstrcmpiW (lpString1=".", lpString2="$Recycle.bin") returned 1 [0129.637] lstrcmpiW (lpString1=".", lpString2="System Volume Information") returned -1 [0129.637] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\pt-BR\\.") returned 19 [0129.637] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0129.637] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1 [0129.637] lstrcmpiW (lpString1="..", lpString2="$Recycle.bin") returned 1 [0129.637] lstrcmpiW (lpString1="..", lpString2="System Volume Information") returned -1 [0129.637] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\pt-BR\\..") returned 20 [0129.637] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0129.637] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="Windows") returned -1 [0129.637] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="$Recycle.bin") returned 1 [0129.637] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="System Volume Information") returned -1 [0129.637] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui") returned 33 [0129.637] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch=".CORP") returned 0x0 [0129.637] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui\r\n") returned 59 [0129.638] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3b, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3b, lpOverlapped=0x0) returned 1 [0129.638] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.638] GetLastError () returned 0x5 [0129.638] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Can't open file (Error: %d): %S\r\n" | out: pszDest="Can't open file (Error: 5): \\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui\r\n") returned 63 [0129.638] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3f, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3f, lpOverlapped=0x0) returned 1 [0129.638] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 0 [0129.638] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\pt-BR\\$%%! NOTE ABOUT FILES -=!-.html") returned 49 [0129.638] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\$%%! NOTE ABOUT FILES -=!-.html" (normalized: "c:\\boot\\pt-br\\$%%! note about files -=!-.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0129.639] WriteFile (in: hFile=0x10c, lpBuffer=0x85018*, nNumberOfBytesToWrite=0x647, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85018*, lpNumberOfBytesWritten=0x24bf3a0*=0x647, lpOverlapped=0x0) returned 1 [0129.640] WriteFile (in: hFile=0x10c, lpBuffer=0x8655c*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x8655c*, lpNumberOfBytesWritten=0x24bf3a0*=0x10, lpOverlapped=0x0) returned 1 [0129.640] WriteFile (in: hFile=0x10c, lpBuffer=0x85660*, nNumberOfBytesToWrite=0x5ac, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85660*, lpNumberOfBytesWritten=0x24bf3a0*=0x5ac, lpOverlapped=0x0) returned 1 [0129.640] WriteFile (in: hFile=0x10c, lpBuffer=0x4c4f9a*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x4c4f9a*, lpNumberOfBytesWritten=0x24bf3a0*=0x11, lpOverlapped=0x0) returned 1 [0129.640] WriteFile (in: hFile=0x10c, lpBuffer=0x85c10*, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85c10*, lpNumberOfBytesWritten=0x24bf3a0*=0x62, lpOverlapped=0x0) returned 1 [0129.640] WriteFile (in: hFile=0x10c, lpBuffer=0x4c4fcc*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x4c4fcc*, lpNumberOfBytesWritten=0x24bf3a0*=0x11, lpOverlapped=0x0) returned 1 [0129.640] WriteFile (in: hFile=0x10c, lpBuffer=0x85c78*, nNumberOfBytesToWrite=0x2af, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85c78*, lpNumberOfBytesWritten=0x24bf3a0*=0x2af, lpOverlapped=0x0) returned 1 [0129.640] CloseHandle (hObject=0x10c) returned 1 [0129.641] FindClose (in: hFindFile=0x4fd808 | out: hFindFile=0x4fd808) returned 1 [0129.641] FindNextFileW (in: hFindFile=0x4ec7b8, lpFindFileData=0x24bf660 | out: lpFindFileData=0x24bf660) returned 1 [0129.641] lstrcmpiW (lpString1="pt-PT", lpString2="Windows") returned -1 [0129.641] lstrcmpiW (lpString1="pt-PT", lpString2="$Recycle.bin") returned 1 [0129.641] lstrcmpiW (lpString1="pt-PT", lpString2="System Volume Information") returned -1 [0129.641] wnsprintfW (in: pszDest=0x4dc7b0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\pt-PT") returned 17 [0129.641] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\pt-PT\\*") returned 19 [0129.641] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-PT\\*", lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 0x4fd808 [0129.641] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1 [0129.641] lstrcmpiW (lpString1=".", lpString2="$Recycle.bin") returned 1 [0129.642] lstrcmpiW (lpString1=".", lpString2="System Volume Information") returned -1 [0129.642] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\pt-PT\\.") returned 19 [0129.642] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0129.642] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1 [0129.642] lstrcmpiW (lpString1="..", lpString2="$Recycle.bin") returned 1 [0129.642] lstrcmpiW (lpString1="..", lpString2="System Volume Information") returned -1 [0129.642] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\pt-PT\\..") returned 20 [0129.642] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0129.642] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="Windows") returned -1 [0129.642] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="$Recycle.bin") returned 1 [0129.642] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="System Volume Information") returned -1 [0129.642] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui") returned 33 [0129.642] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch=".CORP") returned 0x0 [0129.642] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui\r\n") returned 59 [0129.642] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3b, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3b, lpOverlapped=0x0) returned 1 [0129.642] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.643] GetLastError () returned 0x5 [0129.643] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Can't open file (Error: %d): %S\r\n" | out: pszDest="Can't open file (Error: 5): \\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui\r\n") returned 63 [0129.643] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3f, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3f, lpOverlapped=0x0) returned 1 [0129.643] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 0 [0129.644] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\pt-PT\\$%%! NOTE ABOUT FILES -=!-.html") returned 49 [0129.644] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\$%%! NOTE ABOUT FILES -=!-.html" (normalized: "c:\\boot\\pt-pt\\$%%! note about files -=!-.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0129.644] WriteFile (in: hFile=0x10c, lpBuffer=0x85018*, nNumberOfBytesToWrite=0x647, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85018*, lpNumberOfBytesWritten=0x24bf3a0*=0x647, lpOverlapped=0x0) returned 1 [0129.645] WriteFile (in: hFile=0x10c, lpBuffer=0x8655c*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x8655c*, lpNumberOfBytesWritten=0x24bf3a0*=0x10, lpOverlapped=0x0) returned 1 [0129.645] WriteFile (in: hFile=0x10c, lpBuffer=0x85660*, nNumberOfBytesToWrite=0x5ac, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85660*, lpNumberOfBytesWritten=0x24bf3a0*=0x5ac, lpOverlapped=0x0) returned 1 [0129.645] WriteFile (in: hFile=0x10c, lpBuffer=0x4c4f9a*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x4c4f9a*, lpNumberOfBytesWritten=0x24bf3a0*=0x11, lpOverlapped=0x0) returned 1 [0129.645] WriteFile (in: hFile=0x10c, lpBuffer=0x85c10*, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85c10*, lpNumberOfBytesWritten=0x24bf3a0*=0x62, lpOverlapped=0x0) returned 1 [0129.645] WriteFile (in: hFile=0x10c, lpBuffer=0x4c4fcc*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x4c4fcc*, lpNumberOfBytesWritten=0x24bf3a0*=0x11, lpOverlapped=0x0) returned 1 [0129.646] WriteFile (in: hFile=0x10c, lpBuffer=0x85c78*, nNumberOfBytesToWrite=0x2af, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85c78*, lpNumberOfBytesWritten=0x24bf3a0*=0x2af, lpOverlapped=0x0) returned 1 [0129.646] CloseHandle (hObject=0x10c) returned 1 [0129.646] FindClose (in: hFindFile=0x4fd808 | out: hFindFile=0x4fd808) returned 1 [0129.646] FindNextFileW (in: hFindFile=0x4ec7b8, lpFindFileData=0x24bf660 | out: lpFindFileData=0x24bf660) returned 1 [0129.646] lstrcmpiW (lpString1="ru-RU", lpString2="Windows") returned -1 [0129.646] lstrcmpiW (lpString1="ru-RU", lpString2="$Recycle.bin") returned 1 [0129.646] lstrcmpiW (lpString1="ru-RU", lpString2="System Volume Information") returned -1 [0129.646] wnsprintfW (in: pszDest=0x4dc7b0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\ru-RU") returned 17 [0129.646] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\ru-RU\\*") returned 19 [0129.646] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ru-RU\\*", lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 0x4fd808 [0129.659] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1 [0129.659] lstrcmpiW (lpString1=".", lpString2="$Recycle.bin") returned 1 [0129.659] lstrcmpiW (lpString1=".", lpString2="System Volume Information") returned -1 [0129.659] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\ru-RU\\.") returned 19 [0129.659] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0129.660] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1 [0129.660] lstrcmpiW (lpString1="..", lpString2="$Recycle.bin") returned 1 [0129.660] lstrcmpiW (lpString1="..", lpString2="System Volume Information") returned -1 [0129.660] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\ru-RU\\..") returned 20 [0129.660] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0129.660] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="Windows") returned -1 [0129.660] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="$Recycle.bin") returned 1 [0129.660] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="System Volume Information") returned -1 [0129.660] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui") returned 33 [0129.660] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch=".CORP") returned 0x0 [0129.660] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui\r\n") returned 59 [0129.660] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3b, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3b, lpOverlapped=0x0) returned 1 [0129.660] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.661] GetLastError () returned 0x5 [0129.661] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Can't open file (Error: %d): %S\r\n" | out: pszDest="Can't open file (Error: 5): \\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui\r\n") returned 63 [0129.661] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3f, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3f, lpOverlapped=0x0) returned 1 [0129.661] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 0 [0129.661] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\ru-RU\\$%%! NOTE ABOUT FILES -=!-.html") returned 49 [0129.661] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\$%%! NOTE ABOUT FILES -=!-.html" (normalized: "c:\\boot\\ru-ru\\$%%! note about files -=!-.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0129.661] WriteFile (in: hFile=0x10c, lpBuffer=0x85018*, nNumberOfBytesToWrite=0x647, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85018*, lpNumberOfBytesWritten=0x24bf3a0*=0x647, lpOverlapped=0x0) returned 1 [0129.663] WriteFile (in: hFile=0x10c, lpBuffer=0x8655c*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x8655c*, lpNumberOfBytesWritten=0x24bf3a0*=0x10, lpOverlapped=0x0) returned 1 [0129.663] WriteFile (in: hFile=0x10c, lpBuffer=0x85660*, nNumberOfBytesToWrite=0x5ac, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85660*, lpNumberOfBytesWritten=0x24bf3a0*=0x5ac, lpOverlapped=0x0) returned 1 [0129.663] WriteFile (in: hFile=0x10c, lpBuffer=0x4c4f9a*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x4c4f9a*, lpNumberOfBytesWritten=0x24bf3a0*=0x11, lpOverlapped=0x0) returned 1 [0129.663] WriteFile (in: hFile=0x10c, lpBuffer=0x85c10*, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85c10*, lpNumberOfBytesWritten=0x24bf3a0*=0x62, lpOverlapped=0x0) returned 1 [0129.663] WriteFile (in: hFile=0x10c, lpBuffer=0x4c4fcc*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x4c4fcc*, lpNumberOfBytesWritten=0x24bf3a0*=0x11, lpOverlapped=0x0) returned 1 [0129.663] WriteFile (in: hFile=0x10c, lpBuffer=0x85c78*, nNumberOfBytesToWrite=0x2af, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85c78*, lpNumberOfBytesWritten=0x24bf3a0*=0x2af, lpOverlapped=0x0) returned 1 [0129.663] CloseHandle (hObject=0x10c) returned 1 [0129.664] FindClose (in: hFindFile=0x4fd808 | out: hFindFile=0x4fd808) returned 1 [0129.664] FindNextFileW (in: hFindFile=0x4ec7b8, lpFindFileData=0x24bf660 | out: lpFindFileData=0x24bf660) returned 1 [0129.664] lstrcmpiW (lpString1="sv-SE", lpString2="Windows") returned -1 [0129.664] lstrcmpiW (lpString1="sv-SE", lpString2="$Recycle.bin") returned 1 [0129.664] lstrcmpiW (lpString1="sv-SE", lpString2="System Volume Information") returned -1 [0129.664] wnsprintfW (in: pszDest=0x4dc7b0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\sv-SE") returned 17 [0129.664] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\sv-SE\\*") returned 19 [0129.664] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sv-SE\\*", lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 0x4fd808 [0129.664] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1 [0129.665] lstrcmpiW (lpString1=".", lpString2="$Recycle.bin") returned 1 [0129.665] lstrcmpiW (lpString1=".", lpString2="System Volume Information") returned -1 [0129.665] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\sv-SE\\.") returned 19 [0129.665] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0129.665] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1 [0129.665] lstrcmpiW (lpString1="..", lpString2="$Recycle.bin") returned 1 [0129.665] lstrcmpiW (lpString1="..", lpString2="System Volume Information") returned -1 [0129.665] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\sv-SE\\..") returned 20 [0129.665] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0129.665] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="Windows") returned -1 [0129.665] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="$Recycle.bin") returned 1 [0129.665] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="System Volume Information") returned -1 [0129.665] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui") returned 33 [0129.665] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch=".CORP") returned 0x0 [0129.665] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui\r\n") returned 59 [0129.665] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3b, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3b, lpOverlapped=0x0) returned 1 [0129.666] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.676] GetLastError () returned 0x5 [0129.676] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Can't open file (Error: %d): %S\r\n" | out: pszDest="Can't open file (Error: 5): \\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui\r\n") returned 63 [0129.677] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3f, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3f, lpOverlapped=0x0) returned 1 [0129.677] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 0 [0129.677] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\sv-SE\\$%%! NOTE ABOUT FILES -=!-.html") returned 49 [0129.677] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\$%%! NOTE ABOUT FILES -=!-.html" (normalized: "c:\\boot\\sv-se\\$%%! note about files -=!-.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0129.677] WriteFile (in: hFile=0x10c, lpBuffer=0x85018*, nNumberOfBytesToWrite=0x647, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85018*, lpNumberOfBytesWritten=0x24bf3a0*=0x647, lpOverlapped=0x0) returned 1 [0129.678] WriteFile (in: hFile=0x10c, lpBuffer=0x8655c*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x8655c*, lpNumberOfBytesWritten=0x24bf3a0*=0x10, lpOverlapped=0x0) returned 1 [0129.679] WriteFile (in: hFile=0x10c, lpBuffer=0x85660*, nNumberOfBytesToWrite=0x5ac, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85660*, lpNumberOfBytesWritten=0x24bf3a0*=0x5ac, lpOverlapped=0x0) returned 1 [0129.679] WriteFile (in: hFile=0x10c, lpBuffer=0x4c4f9a*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x4c4f9a*, lpNumberOfBytesWritten=0x24bf3a0*=0x11, lpOverlapped=0x0) returned 1 [0129.679] WriteFile (in: hFile=0x10c, lpBuffer=0x85c10*, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85c10*, lpNumberOfBytesWritten=0x24bf3a0*=0x62, lpOverlapped=0x0) returned 1 [0129.679] WriteFile (in: hFile=0x10c, lpBuffer=0x4c4fcc*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x4c4fcc*, lpNumberOfBytesWritten=0x24bf3a0*=0x11, lpOverlapped=0x0) returned 1 [0129.679] WriteFile (in: hFile=0x10c, lpBuffer=0x85c78*, nNumberOfBytesToWrite=0x2af, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85c78*, lpNumberOfBytesWritten=0x24bf3a0*=0x2af, lpOverlapped=0x0) returned 1 [0129.679] CloseHandle (hObject=0x10c) returned 1 [0129.679] FindClose (in: hFindFile=0x4fd808 | out: hFindFile=0x4fd808) returned 1 [0129.680] FindNextFileW (in: hFindFile=0x4ec7b8, lpFindFileData=0x24bf660 | out: lpFindFileData=0x24bf660) returned 1 [0129.680] lstrcmpiW (lpString1="tr-TR", lpString2="Windows") returned -1 [0129.680] lstrcmpiW (lpString1="tr-TR", lpString2="$Recycle.bin") returned 1 [0129.680] lstrcmpiW (lpString1="tr-TR", lpString2="System Volume Information") returned 1 [0129.680] wnsprintfW (in: pszDest=0x4dc7b0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\tr-TR") returned 17 [0129.680] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\tr-TR\\*") returned 19 [0129.680] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\tr-TR\\*", lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 0x4fd808 [0129.680] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1 [0129.680] lstrcmpiW (lpString1=".", lpString2="$Recycle.bin") returned 1 [0129.680] lstrcmpiW (lpString1=".", lpString2="System Volume Information") returned -1 [0129.680] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\tr-TR\\.") returned 19 [0129.680] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0129.680] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1 [0129.681] lstrcmpiW (lpString1="..", lpString2="$Recycle.bin") returned 1 [0129.681] lstrcmpiW (lpString1="..", lpString2="System Volume Information") returned -1 [0129.681] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\tr-TR\\..") returned 20 [0129.681] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0129.681] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="Windows") returned -1 [0129.681] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="$Recycle.bin") returned 1 [0129.681] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="System Volume Information") returned -1 [0129.681] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui") returned 33 [0129.681] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch=".CORP") returned 0x0 [0129.681] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui\r\n") returned 59 [0129.681] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3b, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3b, lpOverlapped=0x0) returned 1 [0129.681] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.681] GetLastError () returned 0x5 [0129.681] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Can't open file (Error: %d): %S\r\n" | out: pszDest="Can't open file (Error: 5): \\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui\r\n") returned 63 [0129.681] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3f, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3f, lpOverlapped=0x0) returned 1 [0129.681] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 0 [0129.681] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\tr-TR\\$%%! NOTE ABOUT FILES -=!-.html") returned 49 [0129.682] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\$%%! NOTE ABOUT FILES -=!-.html" (normalized: "c:\\boot\\tr-tr\\$%%! note about files -=!-.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0129.682] WriteFile (in: hFile=0x10c, lpBuffer=0x85018*, nNumberOfBytesToWrite=0x647, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85018*, lpNumberOfBytesWritten=0x24bf3a0*=0x647, lpOverlapped=0x0) returned 1 [0129.683] WriteFile (in: hFile=0x10c, lpBuffer=0x8655c*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x8655c*, lpNumberOfBytesWritten=0x24bf3a0*=0x10, lpOverlapped=0x0) returned 1 [0129.683] WriteFile (in: hFile=0x10c, lpBuffer=0x85660*, nNumberOfBytesToWrite=0x5ac, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85660*, lpNumberOfBytesWritten=0x24bf3a0*=0x5ac, lpOverlapped=0x0) returned 1 [0129.683] WriteFile (in: hFile=0x10c, lpBuffer=0x4c4f9a*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x4c4f9a*, lpNumberOfBytesWritten=0x24bf3a0*=0x11, lpOverlapped=0x0) returned 1 [0129.683] WriteFile (in: hFile=0x10c, lpBuffer=0x85c10*, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85c10*, lpNumberOfBytesWritten=0x24bf3a0*=0x62, lpOverlapped=0x0) returned 1 [0129.683] WriteFile (in: hFile=0x10c, lpBuffer=0x4c4fcc*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x4c4fcc*, lpNumberOfBytesWritten=0x24bf3a0*=0x11, lpOverlapped=0x0) returned 1 [0129.683] WriteFile (in: hFile=0x10c, lpBuffer=0x85c78*, nNumberOfBytesToWrite=0x2af, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85c78*, lpNumberOfBytesWritten=0x24bf3a0*=0x2af, lpOverlapped=0x0) returned 1 [0129.683] CloseHandle (hObject=0x10c) returned 1 [0129.684] FindClose (in: hFindFile=0x4fd808 | out: hFindFile=0x4fd808) returned 1 [0129.684] FindNextFileW (in: hFindFile=0x4ec7b8, lpFindFileData=0x24bf660 | out: lpFindFileData=0x24bf660) returned 1 [0129.684] lstrcmpiW (lpString1="zh-CN", lpString2="Windows") returned 1 [0129.684] lstrcmpiW (lpString1="zh-CN", lpString2="$Recycle.bin") returned 1 [0129.684] lstrcmpiW (lpString1="zh-CN", lpString2="System Volume Information") returned 1 [0129.684] wnsprintfW (in: pszDest=0x4dc7b0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\zh-CN") returned 17 [0129.684] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\zh-CN\\*") returned 19 [0129.684] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-CN\\*", lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 0x4fd808 [0129.685] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1 [0129.685] lstrcmpiW (lpString1=".", lpString2="$Recycle.bin") returned 1 [0129.685] lstrcmpiW (lpString1=".", lpString2="System Volume Information") returned -1 [0129.685] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\zh-CN\\.") returned 19 [0129.685] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0129.685] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1 [0129.685] lstrcmpiW (lpString1="..", lpString2="$Recycle.bin") returned 1 [0129.685] lstrcmpiW (lpString1="..", lpString2="System Volume Information") returned -1 [0129.685] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\zh-CN\\..") returned 20 [0129.685] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0129.685] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="Windows") returned -1 [0129.685] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="$Recycle.bin") returned 1 [0129.685] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="System Volume Information") returned -1 [0129.685] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui") returned 33 [0129.685] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch=".CORP") returned 0x0 [0129.685] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui\r\n") returned 59 [0129.685] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3b, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3b, lpOverlapped=0x0) returned 1 [0129.686] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.686] GetLastError () returned 0x5 [0129.686] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Can't open file (Error: %d): %S\r\n" | out: pszDest="Can't open file (Error: 5): \\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui\r\n") returned 63 [0129.687] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3f, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3f, lpOverlapped=0x0) returned 1 [0129.687] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 0 [0129.687] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\zh-CN\\$%%! NOTE ABOUT FILES -=!-.html") returned 49 [0129.687] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\$%%! NOTE ABOUT FILES -=!-.html" (normalized: "c:\\boot\\zh-cn\\$%%! note about files -=!-.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0129.687] WriteFile (in: hFile=0x10c, lpBuffer=0x85018*, nNumberOfBytesToWrite=0x647, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85018*, lpNumberOfBytesWritten=0x24bf3a0*=0x647, lpOverlapped=0x0) returned 1 [0129.688] WriteFile (in: hFile=0x10c, lpBuffer=0x8655c*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x8655c*, lpNumberOfBytesWritten=0x24bf3a0*=0x10, lpOverlapped=0x0) returned 1 [0129.688] WriteFile (in: hFile=0x10c, lpBuffer=0x85660*, nNumberOfBytesToWrite=0x5ac, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85660*, lpNumberOfBytesWritten=0x24bf3a0*=0x5ac, lpOverlapped=0x0) returned 1 [0129.688] WriteFile (in: hFile=0x10c, lpBuffer=0x4c4f9a*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x4c4f9a*, lpNumberOfBytesWritten=0x24bf3a0*=0x11, lpOverlapped=0x0) returned 1 [0129.689] WriteFile (in: hFile=0x10c, lpBuffer=0x85c10*, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85c10*, lpNumberOfBytesWritten=0x24bf3a0*=0x62, lpOverlapped=0x0) returned 1 [0129.689] WriteFile (in: hFile=0x10c, lpBuffer=0x4c4fcc*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x4c4fcc*, lpNumberOfBytesWritten=0x24bf3a0*=0x11, lpOverlapped=0x0) returned 1 [0129.689] WriteFile (in: hFile=0x10c, lpBuffer=0x85c78*, nNumberOfBytesToWrite=0x2af, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85c78*, lpNumberOfBytesWritten=0x24bf3a0*=0x2af, lpOverlapped=0x0) returned 1 [0129.689] CloseHandle (hObject=0x10c) returned 1 [0129.689] FindClose (in: hFindFile=0x4fd808 | out: hFindFile=0x4fd808) returned 1 [0129.689] FindNextFileW (in: hFindFile=0x4ec7b8, lpFindFileData=0x24bf660 | out: lpFindFileData=0x24bf660) returned 1 [0129.689] lstrcmpiW (lpString1="zh-HK", lpString2="Windows") returned 1 [0129.689] lstrcmpiW (lpString1="zh-HK", lpString2="$Recycle.bin") returned 1 [0129.689] lstrcmpiW (lpString1="zh-HK", lpString2="System Volume Information") returned 1 [0129.689] wnsprintfW (in: pszDest=0x4dc7b0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\zh-HK") returned 17 [0129.689] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\zh-HK\\*") returned 19 [0129.689] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-HK\\*", lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 0x4fd808 [0129.690] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1 [0129.690] lstrcmpiW (lpString1=".", lpString2="$Recycle.bin") returned 1 [0129.690] lstrcmpiW (lpString1=".", lpString2="System Volume Information") returned -1 [0129.690] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\zh-HK\\.") returned 19 [0129.690] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0129.690] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1 [0129.690] lstrcmpiW (lpString1="..", lpString2="$Recycle.bin") returned 1 [0129.690] lstrcmpiW (lpString1="..", lpString2="System Volume Information") returned -1 [0129.690] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\zh-HK\\..") returned 20 [0129.690] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0129.690] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="Windows") returned -1 [0129.690] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="$Recycle.bin") returned 1 [0129.690] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="System Volume Information") returned -1 [0129.690] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui") returned 33 [0129.690] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch=".CORP") returned 0x0 [0129.690] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui\r\n") returned 59 [0129.690] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3b, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3b, lpOverlapped=0x0) returned 1 [0129.690] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.691] GetLastError () returned 0x5 [0129.691] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Can't open file (Error: %d): %S\r\n" | out: pszDest="Can't open file (Error: 5): \\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui\r\n") returned 63 [0129.691] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3f, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3f, lpOverlapped=0x0) returned 1 [0129.691] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 0 [0129.691] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\zh-HK\\$%%! NOTE ABOUT FILES -=!-.html") returned 49 [0129.691] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\$%%! NOTE ABOUT FILES -=!-.html" (normalized: "c:\\boot\\zh-hk\\$%%! note about files -=!-.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0129.691] WriteFile (in: hFile=0x10c, lpBuffer=0x85018*, nNumberOfBytesToWrite=0x647, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85018*, lpNumberOfBytesWritten=0x24bf3a0*=0x647, lpOverlapped=0x0) returned 1 [0129.692] WriteFile (in: hFile=0x10c, lpBuffer=0x8655c*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x8655c*, lpNumberOfBytesWritten=0x24bf3a0*=0x10, lpOverlapped=0x0) returned 1 [0129.692] WriteFile (in: hFile=0x10c, lpBuffer=0x85660*, nNumberOfBytesToWrite=0x5ac, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85660*, lpNumberOfBytesWritten=0x24bf3a0*=0x5ac, lpOverlapped=0x0) returned 1 [0129.692] WriteFile (in: hFile=0x10c, lpBuffer=0x4c4f9a*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x4c4f9a*, lpNumberOfBytesWritten=0x24bf3a0*=0x11, lpOverlapped=0x0) returned 1 [0129.693] WriteFile (in: hFile=0x10c, lpBuffer=0x85c10*, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85c10*, lpNumberOfBytesWritten=0x24bf3a0*=0x62, lpOverlapped=0x0) returned 1 [0129.693] WriteFile (in: hFile=0x10c, lpBuffer=0x4c4fcc*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x4c4fcc*, lpNumberOfBytesWritten=0x24bf3a0*=0x11, lpOverlapped=0x0) returned 1 [0129.693] WriteFile (in: hFile=0x10c, lpBuffer=0x85c78*, nNumberOfBytesToWrite=0x2af, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85c78*, lpNumberOfBytesWritten=0x24bf3a0*=0x2af, lpOverlapped=0x0) returned 1 [0129.693] CloseHandle (hObject=0x10c) returned 1 [0129.693] FindClose (in: hFindFile=0x4fd808 | out: hFindFile=0x4fd808) returned 1 [0129.693] FindNextFileW (in: hFindFile=0x4ec7b8, lpFindFileData=0x24bf660 | out: lpFindFileData=0x24bf660) returned 1 [0129.693] lstrcmpiW (lpString1="zh-TW", lpString2="Windows") returned 1 [0129.694] lstrcmpiW (lpString1="zh-TW", lpString2="$Recycle.bin") returned 1 [0129.694] lstrcmpiW (lpString1="zh-TW", lpString2="System Volume Information") returned 1 [0129.694] wnsprintfW (in: pszDest=0x4dc7b0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\zh-TW") returned 17 [0129.694] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\zh-TW\\*") returned 19 [0129.694] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-TW\\*", lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 0x4fd808 [0129.694] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1 [0129.694] lstrcmpiW (lpString1=".", lpString2="$Recycle.bin") returned 1 [0129.694] lstrcmpiW (lpString1=".", lpString2="System Volume Information") returned -1 [0129.694] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\zh-TW\\.") returned 19 [0129.694] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0129.695] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1 [0129.695] lstrcmpiW (lpString1="..", lpString2="$Recycle.bin") returned 1 [0129.695] lstrcmpiW (lpString1="..", lpString2="System Volume Information") returned -1 [0129.695] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\zh-TW\\..") returned 20 [0129.695] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0129.695] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="Windows") returned -1 [0129.695] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="$Recycle.bin") returned 1 [0129.695] lstrcmpiW (lpString1="bootmgr.exe.mui", lpString2="System Volume Information") returned -1 [0129.695] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui") returned 33 [0129.695] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch=".CORP") returned 0x0 [0129.695] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui\r\n") returned 59 [0129.695] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3b, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3b, lpOverlapped=0x0) returned 1 [0129.695] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.695] GetLastError () returned 0x5 [0129.695] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Can't open file (Error: %d): %S\r\n" | out: pszDest="Can't open file (Error: 5): \\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui\r\n") returned 63 [0129.695] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3f, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3f, lpOverlapped=0x0) returned 1 [0129.696] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 0 [0129.696] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\zh-TW\\$%%! NOTE ABOUT FILES -=!-.html") returned 49 [0129.696] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\$%%! NOTE ABOUT FILES -=!-.html" (normalized: "c:\\boot\\zh-tw\\$%%! note about files -=!-.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0129.696] WriteFile (in: hFile=0x10c, lpBuffer=0x85018*, nNumberOfBytesToWrite=0x647, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85018*, lpNumberOfBytesWritten=0x24bf3a0*=0x647, lpOverlapped=0x0) returned 1 [0129.697] WriteFile (in: hFile=0x10c, lpBuffer=0x8655c*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x8655c*, lpNumberOfBytesWritten=0x24bf3a0*=0x10, lpOverlapped=0x0) returned 1 [0129.697] WriteFile (in: hFile=0x10c, lpBuffer=0x85660*, nNumberOfBytesToWrite=0x5ac, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85660*, lpNumberOfBytesWritten=0x24bf3a0*=0x5ac, lpOverlapped=0x0) returned 1 [0129.697] WriteFile (in: hFile=0x10c, lpBuffer=0x4c4f9a*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x4c4f9a*, lpNumberOfBytesWritten=0x24bf3a0*=0x11, lpOverlapped=0x0) returned 1 [0129.697] WriteFile (in: hFile=0x10c, lpBuffer=0x85c10*, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85c10*, lpNumberOfBytesWritten=0x24bf3a0*=0x62, lpOverlapped=0x0) returned 1 [0129.697] WriteFile (in: hFile=0x10c, lpBuffer=0x4c4fcc*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x4c4fcc*, lpNumberOfBytesWritten=0x24bf3a0*=0x11, lpOverlapped=0x0) returned 1 [0129.697] WriteFile (in: hFile=0x10c, lpBuffer=0x85c78*, nNumberOfBytesToWrite=0x2af, lpNumberOfBytesWritten=0x24bf3a0, lpOverlapped=0x0 | out: lpBuffer=0x85c78*, lpNumberOfBytesWritten=0x24bf3a0*=0x2af, lpOverlapped=0x0) returned 1 [0129.698] CloseHandle (hObject=0x10c) returned 1 [0129.698] FindClose (in: hFindFile=0x4fd808 | out: hFindFile=0x4fd808) returned 1 [0129.698] FindNextFileW (in: hFindFile=0x4ec7b8, lpFindFileData=0x24bf660 | out: lpFindFileData=0x24bf660) returned 0 [0129.698] wnsprintfW (in: pszDest=0x4dc7b0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\$%%! NOTE ABOUT FILES -=!-.html") returned 43 [0129.698] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\$%%! NOTE ABOUT FILES -=!-.html" (normalized: "c:\\boot\\$%%! note about files -=!-.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0129.698] WriteFile (in: hFile=0x108, lpBuffer=0x85018*, nNumberOfBytesToWrite=0x647, lpNumberOfBytesWritten=0x24bf628, lpOverlapped=0x0 | out: lpBuffer=0x85018*, lpNumberOfBytesWritten=0x24bf628*=0x647, lpOverlapped=0x0) returned 1 [0129.699] WriteFile (in: hFile=0x108, lpBuffer=0x8655c*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x24bf628, lpOverlapped=0x0 | out: lpBuffer=0x8655c*, lpNumberOfBytesWritten=0x24bf628*=0x10, lpOverlapped=0x0) returned 1 [0129.699] WriteFile (in: hFile=0x108, lpBuffer=0x85660*, nNumberOfBytesToWrite=0x5ac, lpNumberOfBytesWritten=0x24bf628, lpOverlapped=0x0 | out: lpBuffer=0x85660*, lpNumberOfBytesWritten=0x24bf628*=0x5ac, lpOverlapped=0x0) returned 1 [0129.700] WriteFile (in: hFile=0x108, lpBuffer=0x4c4f9a*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x24bf628, lpOverlapped=0x0 | out: lpBuffer=0x4c4f9a*, lpNumberOfBytesWritten=0x24bf628*=0x11, lpOverlapped=0x0) returned 1 [0129.700] WriteFile (in: hFile=0x108, lpBuffer=0x85c10*, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0x24bf628, lpOverlapped=0x0 | out: lpBuffer=0x85c10*, lpNumberOfBytesWritten=0x24bf628*=0x62, lpOverlapped=0x0) returned 1 [0129.700] WriteFile (in: hFile=0x108, lpBuffer=0x4c4fcc*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x24bf628, lpOverlapped=0x0 | out: lpBuffer=0x4c4fcc*, lpNumberOfBytesWritten=0x24bf628*=0x11, lpOverlapped=0x0) returned 1 [0129.700] WriteFile (in: hFile=0x108, lpBuffer=0x85c78*, nNumberOfBytesToWrite=0x2af, lpNumberOfBytesWritten=0x24bf628, lpOverlapped=0x0 | out: lpBuffer=0x85c78*, lpNumberOfBytesWritten=0x24bf628*=0x2af, lpOverlapped=0x0) returned 1 [0129.700] CloseHandle (hObject=0x108) returned 1 [0129.700] FindClose (in: hFindFile=0x4ec7b8 | out: hFindFile=0x4ec7b8) returned 1 [0129.700] FindNextFileW (in: hFindFile=0x4db768, lpFindFileData=0x24bf8e8 | out: lpFindFileData=0x24bf8e8) returned 1 [0129.700] lstrcmpiW (lpString1="bootmgr", lpString2="Windows") returned -1 [0129.700] lstrcmpiW (lpString1="bootmgr", lpString2="$Recycle.bin") returned 1 [0129.700] lstrcmpiW (lpString1="bootmgr", lpString2="System Volume Information") returned -1 [0129.701] wnsprintfW (in: pszDest=0x4cb760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\bootmgr") returned 14 [0129.701] StrStrIW (lpFirst="bootmgr", lpSrch=".CORP") returned 0x0 [0129.701] wnsprintfA (in: pszDest=0x24bf450, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\bootmgr\r\n") returned 40 [0129.701] WriteFile (in: hFile=0xfc, lpBuffer=0x24bf450*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x24bf898, lpOverlapped=0x0 | out: lpBuffer=0x24bf450*, lpNumberOfBytesWritten=0x24bf898*=0x28, lpOverlapped=0x0) returned 1 [0129.701] CreateFileW (lpFileName="\\\\?\\C:\\bootmgr" (normalized: "c:\\bootmgr"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.701] GetLastError () returned 0x5 [0129.701] wnsprintfA (in: pszDest=0x24bf450, cchDest=1024, pszFmt="Can't open file (Error: %d): %S\r\n" | out: pszDest="Can't open file (Error: 5): \\\\?\\C:\\bootmgr\r\n") returned 44 [0129.701] WriteFile (in: hFile=0xfc, lpBuffer=0x24bf450*, nNumberOfBytesToWrite=0x2c, lpNumberOfBytesWritten=0x24bf898, lpOverlapped=0x0 | out: lpBuffer=0x24bf450*, lpNumberOfBytesWritten=0x24bf898*=0x2c, lpOverlapped=0x0) returned 1 [0129.701] FindNextFileW (in: hFindFile=0x4db768, lpFindFileData=0x24bf8e8 | out: lpFindFileData=0x24bf8e8) returned 1 [0129.701] lstrcmpiW (lpString1="BOOTSECT.BAK", lpString2="Windows") returned -1 [0129.701] lstrcmpiW (lpString1="BOOTSECT.BAK", lpString2="$Recycle.bin") returned 1 [0129.701] lstrcmpiW (lpString1="BOOTSECT.BAK", lpString2="System Volume Information") returned -1 [0129.701] wnsprintfW (in: pszDest=0x4cb760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\BOOTSECT.BAK") returned 19 [0129.701] StrStrIW (lpFirst="BOOTSECT.BAK", lpSrch=".CORP") returned 0x0 [0129.702] wnsprintfA (in: pszDest=0x24bf450, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\BOOTSECT.BAK\r\n") returned 45 [0129.702] WriteFile (in: hFile=0xfc, lpBuffer=0x24bf450*, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0x24bf898, lpOverlapped=0x0 | out: lpBuffer=0x24bf450*, lpNumberOfBytesWritten=0x24bf898*=0x2d, lpOverlapped=0x0) returned 1 [0129.702] CreateFileW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.702] GetLastError () returned 0x5 [0129.703] wnsprintfA (in: pszDest=0x24bf450, cchDest=1024, pszFmt="Can't open file (Error: %d): %S\r\n" | out: pszDest="Can't open file (Error: 5): \\\\?\\C:\\BOOTSECT.BAK\r\n") returned 49 [0129.703] WriteFile (in: hFile=0xfc, lpBuffer=0x24bf450*, nNumberOfBytesToWrite=0x31, lpNumberOfBytesWritten=0x24bf898, lpOverlapped=0x0 | out: lpBuffer=0x24bf450*, lpNumberOfBytesWritten=0x24bf898*=0x31, lpOverlapped=0x0) returned 1 [0129.703] FindNextFileW (in: hFindFile=0x4db768, lpFindFileData=0x24bf8e8 | out: lpFindFileData=0x24bf8e8) returned 1 [0129.703] lstrcmpiW (lpString1="Config.Msi", lpString2="Windows") returned -1 [0129.703] lstrcmpiW (lpString1="Config.Msi", lpString2="$Recycle.bin") returned 1 [0129.703] lstrcmpiW (lpString1="Config.Msi", lpString2="System Volume Information") returned -1 [0129.703] wnsprintfW (in: pszDest=0x4cb760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Config.Msi") returned 17 [0129.703] wnsprintfW (in: pszDest=0x4dc7b0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Config.Msi\\*") returned 19 [0129.703] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Config.Msi\\*", lpFindFileData=0x24bf660 | out: lpFindFileData=0x24bf660) returned 0x4ec7b8 [0129.704] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1 [0129.704] lstrcmpiW (lpString1=".", lpString2="$Recycle.bin") returned 1 [0129.704] lstrcmpiW (lpString1=".", lpString2="System Volume Information") returned -1 [0129.704] wnsprintfW (in: pszDest=0x4dc7b0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Config.Msi\\.") returned 19 [0129.704] StrStrIW (lpFirst=".", lpSrch=".CORP") returned 0x0 [0129.704] wnsprintfA (in: pszDest=0x24bf1c8, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\Config.Msi\\.\r\n") returned 45 [0129.704] WriteFile (in: hFile=0xfc, lpBuffer=0x24bf1c8*, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0x24bf610, lpOverlapped=0x0 | out: lpBuffer=0x24bf1c8*, lpNumberOfBytesWritten=0x24bf610*=0x2d, lpOverlapped=0x0) returned 1 [0129.704] CreateFileW (lpFileName="\\\\?\\C:\\Config.Msi\\." (normalized: "c:\\config.msi\\."), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.704] GetLastError () returned 0x7b [0129.705] wnsprintfA (in: pszDest=0x24bf1c8, cchDest=1024, pszFmt="Can't open file (Error: %d): %S\r\n" | out: pszDest="Can't open file (Error: 123): \\\\?\\C:\\Config.Msi\\.\r\n") returned 51 [0129.705] WriteFile (in: hFile=0xfc, lpBuffer=0x24bf1c8*, nNumberOfBytesToWrite=0x33, lpNumberOfBytesWritten=0x24bf610, lpOverlapped=0x0 | out: lpBuffer=0x24bf1c8*, lpNumberOfBytesWritten=0x24bf610*=0x33, lpOverlapped=0x0) returned 1 [0129.705] FindNextFileW (in: hFindFile=0x4ec7b8, lpFindFileData=0x24bf660 | out: lpFindFileData=0x24bf660) returned 1 [0129.705] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1 [0129.705] lstrcmpiW (lpString1="..", lpString2="$Recycle.bin") returned 1 [0129.705] lstrcmpiW (lpString1="..", lpString2="System Volume Information") returned -1 [0129.705] wnsprintfW (in: pszDest=0x4dc7b0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Config.Msi\\..") returned 20 [0129.705] StrStrIW (lpFirst="..", lpSrch=".CORP") returned 0x0 [0129.705] wnsprintfA (in: pszDest=0x24bf1c8, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\Config.Msi\\..\r\n") returned 46 [0129.705] WriteFile (in: hFile=0xfc, lpBuffer=0x24bf1c8*, nNumberOfBytesToWrite=0x2e, lpNumberOfBytesWritten=0x24bf610, lpOverlapped=0x0 | out: lpBuffer=0x24bf1c8*, lpNumberOfBytesWritten=0x24bf610*=0x2e, lpOverlapped=0x0) returned 1 [0129.705] CreateFileW (lpFileName="\\\\?\\C:\\Config.Msi\\.." (normalized: "c:"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.705] GetLastError () returned 0x7b [0129.705] wnsprintfA (in: pszDest=0x24bf1c8, cchDest=1024, pszFmt="Can't open file (Error: %d): %S\r\n" | out: pszDest="Can't open file (Error: 123): \\\\?\\C:\\Config.Msi\\..\r\n") returned 52 [0129.705] WriteFile (in: hFile=0xfc, lpBuffer=0x24bf1c8*, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0x24bf610, lpOverlapped=0x0 | out: lpBuffer=0x24bf1c8*, lpNumberOfBytesWritten=0x24bf610*=0x34, lpOverlapped=0x0) returned 1 [0129.706] FindNextFileW (in: hFindFile=0x4ec7b8, lpFindFileData=0x24bf660 | out: lpFindFileData=0x24bf660) returned 0 [0129.706] wnsprintfW (in: pszDest=0x4dc7b0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Config.Msi\\$%%! NOTE ABOUT FILES -=!-.html") returned 49 [0129.706] CreateFileW (lpFileName="\\\\?\\C:\\Config.Msi\\$%%! NOTE ABOUT FILES -=!-.html" (normalized: "c:\\config.msi\\$%%! note about files -=!-.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0129.706] WriteFile (in: hFile=0x108, lpBuffer=0x85018*, nNumberOfBytesToWrite=0x647, lpNumberOfBytesWritten=0x24bf628, lpOverlapped=0x0 | out: lpBuffer=0x85018*, lpNumberOfBytesWritten=0x24bf628*=0x647, lpOverlapped=0x0) returned 1 [0129.707] WriteFile (in: hFile=0x108, lpBuffer=0x8655c*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x24bf628, lpOverlapped=0x0 | out: lpBuffer=0x8655c*, lpNumberOfBytesWritten=0x24bf628*=0x10, lpOverlapped=0x0) returned 1 [0129.707] WriteFile (in: hFile=0x108, lpBuffer=0x85660*, nNumberOfBytesToWrite=0x5ac, lpNumberOfBytesWritten=0x24bf628, lpOverlapped=0x0 | out: lpBuffer=0x85660*, lpNumberOfBytesWritten=0x24bf628*=0x5ac, lpOverlapped=0x0) returned 1 [0129.707] WriteFile (in: hFile=0x108, lpBuffer=0x4c4f9a*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x24bf628, lpOverlapped=0x0 | out: lpBuffer=0x4c4f9a*, lpNumberOfBytesWritten=0x24bf628*=0x11, lpOverlapped=0x0) returned 1 [0129.707] WriteFile (in: hFile=0x108, lpBuffer=0x85c10*, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0x24bf628, lpOverlapped=0x0 | out: lpBuffer=0x85c10*, lpNumberOfBytesWritten=0x24bf628*=0x62, lpOverlapped=0x0) returned 1 [0129.707] WriteFile (in: hFile=0x108, lpBuffer=0x4c4fcc*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x24bf628, lpOverlapped=0x0 | out: lpBuffer=0x4c4fcc*, lpNumberOfBytesWritten=0x24bf628*=0x11, lpOverlapped=0x0) returned 1 [0129.707] WriteFile (in: hFile=0x108, lpBuffer=0x85c78*, nNumberOfBytesToWrite=0x2af, lpNumberOfBytesWritten=0x24bf628, lpOverlapped=0x0 | out: lpBuffer=0x85c78*, lpNumberOfBytesWritten=0x24bf628*=0x2af, lpOverlapped=0x0) returned 1 [0129.708] CloseHandle (hObject=0x108) returned 1 [0129.708] FindClose (in: hFindFile=0x4ec7b8 | out: hFindFile=0x4ec7b8) returned 1 [0129.708] FindNextFileW (in: hFindFile=0x4db768, lpFindFileData=0x24bf8e8 | out: lpFindFileData=0x24bf8e8) returned 1 [0129.708] lstrcmpiW (lpString1="Documents and Settings", lpString2="Windows") returned -1 [0129.708] lstrcmpiW (lpString1="Documents and Settings", lpString2="$Recycle.bin") returned 1 [0129.708] lstrcmpiW (lpString1="Documents and Settings", lpString2="System Volume Information") returned -1 [0129.708] wnsprintfW (in: pszDest=0x4cb760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Documents and Settings") returned 29 [0129.708] wnsprintfW (in: pszDest=0x4dc7b0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Documents and Settings\\*") returned 31 [0129.708] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Documents and Settings\\*", lpFindFileData=0x24bf660 | out: lpFindFileData=0x24bf660) returned 0xffffffff [0129.756] FindNextFileW (in: hFindFile=0x4db768, lpFindFileData=0x24bf8e8 | out: lpFindFileData=0x24bf8e8) returned 1 [0129.756] lstrcmpiW (lpString1="hiberfil.sys", lpString2="Windows") returned -1 [0129.756] lstrcmpiW (lpString1="hiberfil.sys", lpString2="$Recycle.bin") returned 1 [0129.756] lstrcmpiW (lpString1="hiberfil.sys", lpString2="System Volume Information") returned -1 [0129.756] wnsprintfW (in: pszDest=0x4cb760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\hiberfil.sys") returned 19 [0129.756] StrStrIW (lpFirst="hiberfil.sys", lpSrch=".CORP") returned 0x0 [0129.756] wnsprintfA (in: pszDest=0x24bf450, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\hiberfil.sys\r\n") returned 45 [0129.756] WriteFile (in: hFile=0xfc, lpBuffer=0x24bf450*, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0x24bf898, lpOverlapped=0x0 | out: lpBuffer=0x24bf450*, lpNumberOfBytesWritten=0x24bf898*=0x2d, lpOverlapped=0x0) returned 1 [0129.756] CreateFileW (lpFileName="\\\\?\\C:\\hiberfil.sys" (normalized: "c:\\hiberfil.sys"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.756] GetLastError () returned 0x20 [0129.756] wnsprintfA (in: pszDest=0x24bf450, cchDest=1024, pszFmt="Can't open file (Error: %d): %S\r\n" | out: pszDest="Can't open file (Error: 32): \\\\?\\C:\\hiberfil.sys\r\n") returned 50 [0129.756] WriteFile (in: hFile=0xfc, lpBuffer=0x24bf450*, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0x24bf898, lpOverlapped=0x0 | out: lpBuffer=0x24bf450*, lpNumberOfBytesWritten=0x24bf898*=0x32, lpOverlapped=0x0) returned 1 [0129.756] FindNextFileW (in: hFindFile=0x4db768, lpFindFileData=0x24bf8e8 | out: lpFindFileData=0x24bf8e8) returned 1 [0129.756] lstrcmpiW (lpString1="MSOCache", lpString2="Windows") returned -1 [0129.756] lstrcmpiW (lpString1="MSOCache", lpString2="$Recycle.bin") returned 1 [0129.757] lstrcmpiW (lpString1="MSOCache", lpString2="System Volume Information") returned -1 [0129.757] wnsprintfW (in: pszDest=0x4cb760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache") returned 15 [0129.757] wnsprintfW (in: pszDest=0x4dc7b0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\MSOCache\\*") returned 17 [0129.757] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\*", lpFindFileData=0x24bf660 | out: lpFindFileData=0x24bf660) returned 0x4ec7b8 [0129.757] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1 [0129.757] lstrcmpiW (lpString1=".", lpString2="$Recycle.bin") returned 1 [0129.757] lstrcmpiW (lpString1=".", lpString2="System Volume Information") returned -1 [0129.757] wnsprintfW (in: pszDest=0x4dc7b0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\.") returned 17 [0129.757] StrStrIW (lpFirst=".", lpSrch=".CORP") returned 0x0 [0129.757] wnsprintfA (in: pszDest=0x24bf1c8, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\MSOCache\\.\r\n") returned 43 [0129.757] WriteFile (in: hFile=0xfc, lpBuffer=0x24bf1c8*, nNumberOfBytesToWrite=0x2b, lpNumberOfBytesWritten=0x24bf610, lpOverlapped=0x0 | out: lpBuffer=0x24bf1c8*, lpNumberOfBytesWritten=0x24bf610*=0x2b, lpOverlapped=0x0) returned 1 [0129.757] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\." (normalized: "c:\\msocache\\."), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.757] GetLastError () returned 0x7b [0129.757] wnsprintfA (in: pszDest=0x24bf1c8, cchDest=1024, pszFmt="Can't open file (Error: %d): %S\r\n" | out: pszDest="Can't open file (Error: 123): \\\\?\\C:\\MSOCache\\.\r\n") returned 49 [0129.757] WriteFile (in: hFile=0xfc, lpBuffer=0x24bf1c8*, nNumberOfBytesToWrite=0x31, lpNumberOfBytesWritten=0x24bf610, lpOverlapped=0x0 | out: lpBuffer=0x24bf1c8*, lpNumberOfBytesWritten=0x24bf610*=0x31, lpOverlapped=0x0) returned 1 [0129.758] FindNextFileW (in: hFindFile=0x4ec7b8, lpFindFileData=0x24bf660 | out: lpFindFileData=0x24bf660) returned 1 [0129.758] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1 [0129.758] lstrcmpiW (lpString1="..", lpString2="$Recycle.bin") returned 1 [0129.758] lstrcmpiW (lpString1="..", lpString2="System Volume Information") returned -1 [0129.758] wnsprintfW (in: pszDest=0x4dc7b0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\..") returned 18 [0129.758] StrStrIW (lpFirst="..", lpSrch=".CORP") returned 0x0 [0129.758] wnsprintfA (in: pszDest=0x24bf1c8, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\MSOCache\\..\r\n") returned 44 [0129.758] WriteFile (in: hFile=0xfc, lpBuffer=0x24bf1c8*, nNumberOfBytesToWrite=0x2c, lpNumberOfBytesWritten=0x24bf610, lpOverlapped=0x0 | out: lpBuffer=0x24bf1c8*, lpNumberOfBytesWritten=0x24bf610*=0x2c, lpOverlapped=0x0) returned 1 [0129.758] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\.." (normalized: "c:"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.758] GetLastError () returned 0x7b [0129.758] wnsprintfA (in: pszDest=0x24bf1c8, cchDest=1024, pszFmt="Can't open file (Error: %d): %S\r\n" | out: pszDest="Can't open file (Error: 123): \\\\?\\C:\\MSOCache\\..\r\n") returned 50 [0129.758] WriteFile (in: hFile=0xfc, lpBuffer=0x24bf1c8*, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0x24bf610, lpOverlapped=0x0 | out: lpBuffer=0x24bf1c8*, lpNumberOfBytesWritten=0x24bf610*=0x32, lpOverlapped=0x0) returned 1 [0129.758] FindNextFileW (in: hFindFile=0x4ec7b8, lpFindFileData=0x24bf660 | out: lpFindFileData=0x24bf660) returned 1 [0129.758] lstrcmpiW (lpString1="All Users", lpString2="Windows") returned -1 [0129.758] lstrcmpiW (lpString1="All Users", lpString2="$Recycle.bin") returned 1 [0129.758] lstrcmpiW (lpString1="All Users", lpString2="System Volume Information") returned -1 [0129.758] wnsprintfW (in: pszDest=0x4dc7b0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users") returned 25 [0129.758] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\*") returned 27 [0129.758] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\*", lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 0x4fd808 [0129.780] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1 [0129.780] lstrcmpiW (lpString1=".", lpString2="$Recycle.bin") returned 1 [0129.780] lstrcmpiW (lpString1=".", lpString2="System Volume Information") returned -1 [0129.780] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\.") returned 27 [0129.780] StrStrIW (lpFirst=".", lpSrch=".CORP") returned 0x0 [0129.780] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\MSOCache\\All Users\\.\r\n") returned 53 [0129.780] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x35, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x35, lpOverlapped=0x0) returned 1 [0129.780] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\." (normalized: "c:\\msocache\\all users\\."), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.780] GetLastError () returned 0x7b [0129.780] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Can't open file (Error: %d): %S\r\n" | out: pszDest="Can't open file (Error: 123): \\\\?\\C:\\MSOCache\\All Users\\.\r\n") returned 59 [0129.780] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3b, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3b, lpOverlapped=0x0) returned 1 [0129.780] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0129.822] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1 [0129.822] lstrcmpiW (lpString1="..", lpString2="$Recycle.bin") returned 1 [0129.822] lstrcmpiW (lpString1="..", lpString2="System Volume Information") returned -1 [0129.822] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\..") returned 28 [0129.822] StrStrIW (lpFirst="..", lpSrch=".CORP") returned 0x0 [0129.822] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\MSOCache\\All Users\\..\r\n") returned 54 [0129.822] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x36, lpOverlapped=0x0) returned 1 [0129.823] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\.." (normalized: "c:\\msocache"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.823] GetLastError () returned 0x7b [0129.823] wnsprintfA (in: pszDest=0x24bef40, cchDest=1024, pszFmt="Can't open file (Error: %d): %S\r\n" | out: pszDest="Can't open file (Error: 123): \\\\?\\C:\\MSOCache\\All Users\\..\r\n") returned 60 [0129.823] WriteFile (in: hFile=0xfc, lpBuffer=0x24bef40*, nNumberOfBytesToWrite=0x3c, lpNumberOfBytesWritten=0x24bf388, lpOverlapped=0x0 | out: lpBuffer=0x24bef40*, lpNumberOfBytesWritten=0x24bf388*=0x3c, lpOverlapped=0x0) returned 1 [0129.823] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0129.823] lstrcmpiW (lpString1="{90140000-0016-0409-1000-0000000FF1CE}-C", lpString2="Windows") returned -1 [0129.823] lstrcmpiW (lpString1="{90140000-0016-0409-1000-0000000FF1CE}-C", lpString2="$Recycle.bin") returned 1 [0129.823] lstrcmpiW (lpString1="{90140000-0016-0409-1000-0000000FF1CE}-C", lpString2="System Volume Information") returned -1 [0129.823] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C") returned 66 [0129.824] wnsprintfW (in: pszDest=0x4fe850, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\*") returned 68 [0129.824] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x24bf150 | out: lpFindFileData=0x24bf150) returned 0x50e858 [0129.827] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1 [0129.827] lstrcmpiW (lpString1=".", lpString2="$Recycle.bin") returned 1 [0129.827] lstrcmpiW (lpString1=".", lpString2="System Volume Information") returned -1 [0129.827] wnsprintfW (in: pszDest=0x4fe850, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\.") returned 68 [0129.827] StrStrIW (lpFirst=".", lpSrch=".CORP") returned 0x0 [0129.827] wnsprintfA (in: pszDest=0x24becb8, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\.\r\n") returned 94 [0129.827] WriteFile (in: hFile=0xfc, lpBuffer=0x24becb8*, nNumberOfBytesToWrite=0x5e, lpNumberOfBytesWritten=0x24bf100, lpOverlapped=0x0 | out: lpBuffer=0x24becb8*, lpNumberOfBytesWritten=0x24bf100*=0x5e, lpOverlapped=0x0) returned 1 [0129.827] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\." (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\."), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.827] GetLastError () returned 0x7b [0129.827] wnsprintfA (in: pszDest=0x24becb8, cchDest=1024, pszFmt="Can't open file (Error: %d): %S\r\n" | out: pszDest="Can't open file (Error: 123): \\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\.\r\n") returned 100 [0129.828] WriteFile (in: hFile=0xfc, lpBuffer=0x24becb8*, nNumberOfBytesToWrite=0x64, lpNumberOfBytesWritten=0x24bf100, lpOverlapped=0x0 | out: lpBuffer=0x24becb8*, lpNumberOfBytesWritten=0x24bf100*=0x64, lpOverlapped=0x0) returned 1 [0129.828] FindNextFileW (in: hFindFile=0x50e858, lpFindFileData=0x24bf150 | out: lpFindFileData=0x24bf150) returned 1 [0129.828] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1 [0129.828] lstrcmpiW (lpString1="..", lpString2="$Recycle.bin") returned 1 [0129.828] lstrcmpiW (lpString1="..", lpString2="System Volume Information") returned -1 [0129.828] wnsprintfW (in: pszDest=0x4fe850, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\..") returned 69 [0129.828] StrStrIW (lpFirst="..", lpSrch=".CORP") returned 0x0 [0129.828] wnsprintfA (in: pszDest=0x24becb8, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\..\r\n") returned 95 [0129.828] WriteFile (in: hFile=0xfc, lpBuffer=0x24becb8*, nNumberOfBytesToWrite=0x5f, lpNumberOfBytesWritten=0x24bf100, lpOverlapped=0x0 | out: lpBuffer=0x24becb8*, lpNumberOfBytesWritten=0x24bf100*=0x5f, lpOverlapped=0x0) returned 1 [0129.828] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\.." (normalized: "c:\\msocache\\all users"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.828] GetLastError () returned 0x7b [0129.828] wnsprintfA (in: pszDest=0x24becb8, cchDest=1024, pszFmt="Can't open file (Error: %d): %S\r\n" | out: pszDest="Can't open file (Error: 123): \\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\..\r\n") returned 101 [0129.828] WriteFile (in: hFile=0xfc, lpBuffer=0x24becb8*, nNumberOfBytesToWrite=0x65, lpNumberOfBytesWritten=0x24bf100, lpOverlapped=0x0 | out: lpBuffer=0x24becb8*, lpNumberOfBytesWritten=0x24bf100*=0x65, lpOverlapped=0x0) returned 1 [0129.828] FindNextFileW (in: hFindFile=0x50e858, lpFindFileData=0x24bf150 | out: lpFindFileData=0x24bf150) returned 1 [0129.828] lstrcmpiW (lpString1="ExcelLR.cab", lpString2="Windows") returned -1 [0129.828] lstrcmpiW (lpString1="ExcelLR.cab", lpString2="$Recycle.bin") returned 1 [0129.828] lstrcmpiW (lpString1="ExcelLR.cab", lpString2="System Volume Information") returned -1 [0129.828] wnsprintfW (in: pszDest=0x4fe850, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab") returned 78 [0129.828] StrStrIW (lpFirst="ExcelLR.cab", lpSrch=".CORP") returned 0x0 [0129.828] wnsprintfA (in: pszDest=0x24becb8, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab\r\n") returned 104 [0129.828] WriteFile (in: hFile=0xfc, lpBuffer=0x24becb8*, nNumberOfBytesToWrite=0x68, lpNumberOfBytesWritten=0x24bf100, lpOverlapped=0x0 | out: lpBuffer=0x24becb8*, lpNumberOfBytesWritten=0x24bf100*=0x68, lpOverlapped=0x0) returned 1 [0129.829] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0129.832] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.876] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.879] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.880] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.958] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.959] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.959] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.960] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.960] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.960] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.960] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.960] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.960] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.960] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.960] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.961] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.961] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.961] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.963] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.963] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.963] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.963] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.964] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.964] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.964] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.964] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.964] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.964] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.964] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.965] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.965] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.965] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.965] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.965] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.965] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.965] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.966] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.966] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.966] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.966] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.966] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.966] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.966] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.967] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.967] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.967] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.967] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.967] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.967] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.967] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.968] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.968] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.968] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.968] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.968] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.969] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.969] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.969] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.969] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.969] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.970] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.970] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.970] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.970] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.970] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.970] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.970] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.970] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.971] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.971] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.971] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.971] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.971] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.971] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.971] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.971] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.972] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.972] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.972] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.972] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.972] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.972] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.972] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.972] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.973] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.973] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.973] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.973] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.973] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.973] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.973] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.974] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.974] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.974] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.974] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.977] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.977] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.977] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.978] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.978] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.978] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.978] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.978] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.978] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.978] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.978] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.979] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.979] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.979] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.979] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.979] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.979] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.979] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.980] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.980] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.980] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.980] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.980] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.980] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.980] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.981] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.981] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.981] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.981] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.981] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.981] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.982] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.982] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.982] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.982] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.983] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.984] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.984] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.984] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.984] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.984] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.984] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.984] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.984] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.985] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.985] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.985] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.985] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.985] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.985] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.985] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.985] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.986] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.986] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.986] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.986] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.986] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.986] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.986] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.987] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.987] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.987] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.987] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.987] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.987] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.987] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.987] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.987] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.988] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.988] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.988] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.988] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.988] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.988] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.991] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.991] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.992] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.992] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.992] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.992] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.992] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.992] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.993] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.993] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.993] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.993] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.993] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.993] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.994] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.994] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.994] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.994] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.994] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.994] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.995] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.995] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.995] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.995] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.995] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.995] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.996] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.996] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.996] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.996] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.996] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.997] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.997] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.997] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.997] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.997] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.998] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0129.998] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0129.998] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.004] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.004] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.004] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.004] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.004] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.004] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.005] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.005] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.005] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.005] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.005] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.005] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.006] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.006] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.249] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.249] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.250] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.250] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.250] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.250] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.250] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.250] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.250] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.250] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.251] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.251] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.251] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.251] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.251] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.251] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.251] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.251] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.252] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.252] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.252] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.252] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.252] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.252] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.252] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.254] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.255] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.255] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.255] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.255] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.255] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.255] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.256] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.256] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.256] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.256] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.256] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.256] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.256] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.256] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.257] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.257] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.257] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.257] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.257] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.257] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.257] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.257] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.258] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.258] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.258] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.258] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.258] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.258] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.258] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.258] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.259] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.259] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.259] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.259] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.259] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.262] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.262] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.262] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.263] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.263] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.263] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.263] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.263] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.263] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.263] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.263] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.263] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.264] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.264] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.264] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.264] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.264] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.264] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.264] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.264] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.265] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.266] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.266] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.266] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.275] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.275] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.276] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.276] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.277] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.277] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.277] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.277] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.277] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.277] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.277] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.277] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.278] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.278] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.278] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.279] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.279] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.279] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.279] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.281] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.281] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.281] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.281] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.281] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.281] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.281] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.282] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.282] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.282] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.282] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.282] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.282] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.282] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.282] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.283] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.283] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.283] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.283] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.283] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.283] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.283] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.283] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.284] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.284] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.284] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.284] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.284] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.284] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.284] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.284] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.284] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.285] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.285] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.285] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.286] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.286] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.287] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.287] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.287] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.287] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.287] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.287] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.287] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.288] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.288] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.288] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.288] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.288] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.288] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.288] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.288] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.289] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.289] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.289] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.289] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.289] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.289] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.289] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.289] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.290] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.290] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.290] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.290] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.290] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.290] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.290] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.290] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.291] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.291] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.291] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.291] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.291] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.291] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.298] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.299] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.299] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.299] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.299] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.299] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.299] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.299] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.299] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.300] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.300] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.300] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.300] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.300] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.300] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.300] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.300] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.301] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.301] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.301] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.301] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.301] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.301] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.301] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.301] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.302] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.302] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.302] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.302] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.302] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.303] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.303] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.303] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.303] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.303] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.303] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.304] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.304] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.304] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.305] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.305] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.305] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.306] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.306] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.306] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.306] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.306] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.306] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.306] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.306] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.306] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.307] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.307] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.307] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.307] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.307] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.307] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.307] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.307] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.308] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.308] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.308] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.308] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.308] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.308] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.308] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.308] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.309] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.309] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.309] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.309] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.309] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.309] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.309] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.309] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.311] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.311] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.312] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.312] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.312] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.312] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.312] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.312] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.312] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.312] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.313] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.313] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.313] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.313] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.313] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.313] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.313] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.313] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.314] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.314] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.314] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.314] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.314] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.314] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.314] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.314] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.314] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.315] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.315] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.315] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.315] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.315] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.315] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.315] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.315] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.316] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.316] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.316] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.316] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.317] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.317] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.318] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.318] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.318] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.318] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.318] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.318] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.318] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.319] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.319] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.319] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.319] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.319] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.319] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.319] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.319] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.320] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.320] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.320] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.320] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.320] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.320] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.320] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.320] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.321] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.321] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.321] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.321] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.321] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.321] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.321] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.321] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.322] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.322] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.322] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.322] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.322] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.322] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.324] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.324] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.325] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.325] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.325] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.325] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.325] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.325] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.325] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.326] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.326] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.326] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.326] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.326] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.326] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.326] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.326] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.326] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.327] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.327] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.328] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.328] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.328] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.328] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.328] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.328] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.329] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.329] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.329] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.329] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.329] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.329] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.329] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.330] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.330] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.330] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.330] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.330] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.330] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.331] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.332] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.332] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.332] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.332] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.332] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.332] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.333] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.333] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.333] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.333] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.333] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.333] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.334] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.334] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.334] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.334] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.334] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.334] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.334] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.334] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.344] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.344] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.345] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.345] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.345] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.346] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.346] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.346] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.346] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.346] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.346] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.346] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.347] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.347] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.347] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.347] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.347] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.347] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.352] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.352] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.352] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.353] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.353] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.353] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.353] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.353] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.353] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.353] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.353] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.353] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.354] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.354] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.354] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.354] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.354] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.354] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.354] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.354] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.355] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.355] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.355] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.355] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.355] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.355] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.355] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.355] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.356] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.356] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.356] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.356] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.356] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.356] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.356] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.356] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.358] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.358] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.358] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.358] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.358] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.358] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.358] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.359] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.359] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.359] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.359] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.359] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.359] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.359] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.359] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.360] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.360] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.360] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.360] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.360] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.360] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.360] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.360] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.360] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.361] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.361] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.361] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.361] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.361] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.361] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.361] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.361] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.362] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.362] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.362] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.362] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.362] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.362] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.362] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.365] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.365] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.365] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.365] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.365] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.365] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.365] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.365] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.366] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.366] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.366] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.366] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.366] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.366] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.366] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.366] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.367] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.367] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.367] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.367] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.367] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.367] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.367] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.367] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.368] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.368] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.368] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.368] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.368] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.368] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.368] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.368] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.368] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.369] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.369] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.369] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.369] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.369] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.369] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0130.370] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0130.371] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0132.584] wnsprintfA (in: pszDest=0x24becb8, cchDest=1024, pszFmt="File encrypted: %S\r\n" | out: pszDest="File encrypted: \\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab\r\n") returned 96 [0132.584] WriteFile (in: hFile=0xfc, lpBuffer=0x24becb8*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x24becb8*, lpNumberOfBytesWritten=0x24bf114*=0x60, lpOverlapped=0x0) returned 1 [0132.585] wnsprintfW (in: pszDest=0x50f8a0, cchDest=32767, pszFmt="%s_%S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab_9c4rmT6TdKfuH9Ft_{alexbanan@tuta.io}.CORP") returned 120 [0132.585] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab_9c4rmT6TdKfuH9Ft_{alexbanan@tuta.io}.CORP" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab_9c4rmt6tdkfuh9ft_{alexbanan@tuta.io}.corp")) returned 1 [0133.300] wnsprintfA (in: pszDest=0x24becb8, cchDest=1024, pszFmt="File name changed: %S\r\n" | out: pszDest="File name changed: \\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab\r\n") returned 99 [0133.300] WriteFile (in: hFile=0xfc, lpBuffer=0x24becb8*, nNumberOfBytesToWrite=0x63, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x24becb8*, lpNumberOfBytesWritten=0x24bf114*=0x63, lpOverlapped=0x0) returned 1 [0133.300] FindNextFileW (in: hFindFile=0x50e858, lpFindFileData=0x24bf150 | out: lpFindFileData=0x24bf150) returned 1 [0133.300] lstrcmpiW (lpString1="ExcelMUI.msi", lpString2="Windows") returned -1 [0133.300] lstrcmpiW (lpString1="ExcelMUI.msi", lpString2="$Recycle.bin") returned 1 [0133.300] lstrcmpiW (lpString1="ExcelMUI.msi", lpString2="System Volume Information") returned -1 [0133.300] wnsprintfW (in: pszDest=0x4fe850, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi") returned 79 [0133.300] StrStrIW (lpFirst="ExcelMUI.msi", lpSrch=".CORP") returned 0x0 [0133.301] wnsprintfA (in: pszDest=0x24becb8, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi\r\n") returned 105 [0133.301] WriteFile (in: hFile=0xfc, lpBuffer=0x24becb8*, nNumberOfBytesToWrite=0x69, lpNumberOfBytesWritten=0x24bf100, lpOverlapped=0x0 | out: lpBuffer=0x24becb8*, lpNumberOfBytesWritten=0x24bf100*=0x69, lpOverlapped=0x0) returned 1 [0133.301] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0133.301] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.436] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.436] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.436] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.535] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.535] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.535] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.535] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.535] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.535] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.535] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.536] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.536] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.536] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.536] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.536] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.536] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.536] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.536] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.536] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.536] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.536] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.537] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.537] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.537] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.537] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.537] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.537] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.537] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.537] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.537] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.537] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.537] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.538] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.538] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.538] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.538] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.688] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.688] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.689] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.689] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.689] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.689] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.709] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.710] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.710] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.710] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.710] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.710] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.711] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.711] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.711] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.711] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.711] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.711] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.713] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.713] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.713] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.713] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.713] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.714] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.714] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.714] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.714] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.714] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.714] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.714] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.714] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.715] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.715] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.715] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.715] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.715] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.715] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.715] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.715] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.716] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.716] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.716] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.716] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.716] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.716] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.716] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.716] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.717] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.717] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.717] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.718] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.718] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.718] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.718] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.719] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.719] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.719] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.719] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.719] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.719] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.719] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.719] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.720] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.720] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.720] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.720] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.720] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.720] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.720] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.720] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.721] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.721] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.721] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.721] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.721] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.721] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.721] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.721] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.722] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.722] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.722] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.722] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.722] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.722] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.722] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.722] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.723] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.723] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.723] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.723] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.723] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.723] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.723] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.723] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.723] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.724] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.790] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.790] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.790] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.791] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.791] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.791] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.791] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.791] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.791] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.791] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.791] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.792] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.792] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.792] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.792] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.792] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.792] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.792] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.793] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.793] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.793] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.793] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.793] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.793] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.793] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.793] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.793] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.794] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.794] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.794] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.794] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.794] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.794] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.794] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.794] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.794] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.797] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.797] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.797] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.797] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.797] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.798] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.798] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.798] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.798] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.798] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.798] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.798] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.799] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.799] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.799] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.799] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.799] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.799] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.799] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.799] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.799] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.800] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.800] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.800] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.800] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.800] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.800] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.800] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.800] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.800] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.801] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.801] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.801] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.801] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.801] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.801] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.801] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.801] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.802] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.802] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.803] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.803] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.803] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.803] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.804] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.804] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.804] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.804] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.804] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.804] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.804] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.805] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.805] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.805] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.805] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.805] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.805] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.806] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.806] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.806] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.806] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.806] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.806] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.806] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.806] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.807] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.807] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.807] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.807] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.807] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.807] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.807] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.807] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.808] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.808] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.808] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.808] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.808] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.809] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.809] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.809] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.809] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.809] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.810] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.810] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.810] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.810] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.810] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.810] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.810] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.811] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.811] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.811] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.811] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.811] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.811] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.811] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.812] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.812] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.812] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.812] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.812] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.813] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.813] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.813] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.813] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.813] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.813] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.813] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.813] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.813] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.814] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.814] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.814] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.814] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.814] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.814] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.814] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.814] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.814] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.832] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.832] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.832] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.832] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.832] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.832] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.832] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.832] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.833] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.833] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.833] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.833] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.833] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.833] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.833] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.834] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0133.834] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0133.834] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.029] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.029] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.029] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.029] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.029] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.029] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.030] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.030] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.030] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.030] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.030] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.030] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.031] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.031] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.031] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.033] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.033] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.033] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.033] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.033] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.034] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.034] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.034] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.034] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.034] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.034] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.034] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.035] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.035] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.035] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.035] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.035] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.035] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.036] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.036] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.036] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.036] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.036] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.036] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.036] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.037] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.037] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.037] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.037] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.037] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.037] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.037] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.038] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.038] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.038] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.038] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.038] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.038] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.038] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.040] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.040] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.040] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.040] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.040] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.040] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.041] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.041] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.041] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.041] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.041] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.041] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.042] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.042] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.042] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.042] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.042] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.042] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.042] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.042] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.043] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.043] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.043] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.043] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.043] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.043] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.044] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.044] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.044] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.044] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.044] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.044] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.044] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.045] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.045] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.045] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.045] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.045] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.045] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.048] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.048] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.048] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.048] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.048] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.048] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.049] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.049] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.049] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.049] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.049] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.049] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.049] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.050] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.050] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.050] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.050] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.050] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.050] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.050] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.050] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.050] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.050] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.051] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.051] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.051] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.051] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.051] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.051] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.051] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.051] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.051] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.051] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.051] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.052] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.052] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.052] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.052] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.052] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.052] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.052] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.052] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.053] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.053] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.053] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.053] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.053] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.053] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.053] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.053] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.053] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.053] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.053] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.054] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.054] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.054] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.054] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.054] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.054] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.054] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.054] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.054] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.055] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.055] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.055] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.055] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.055] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.055] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.055] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.056] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.056] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.056] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.056] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.056] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.057] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.058] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.059] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.059] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.059] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.059] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.059] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.059] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.059] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.060] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.060] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.060] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.060] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.060] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.060] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.060] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.060] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.060] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.061] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.061] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.061] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.061] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.061] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.061] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.061] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.062] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.062] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.062] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.062] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.062] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.062] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.063] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.063] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.063] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.063] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.063] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.063] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.063] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.064] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.064] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.065] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.066] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.066] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.066] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.066] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.066] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.066] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.067] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.067] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.067] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.067] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.067] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.067] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.067] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.068] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.068] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.068] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.068] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.068] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.068] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.069] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.069] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.069] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.069] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.069] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.069] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.069] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.070] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.070] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.070] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.070] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.070] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.070] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.071] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.071] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.071] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.071] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.071] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.071] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.072] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.072] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.072] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.073] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.073] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.073] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.073] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.073] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.073] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.074] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.074] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.074] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.074] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.074] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.074] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.074] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.074] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.075] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.075] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.100] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.100] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.101] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.101] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.101] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.101] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.101] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.101] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.102] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.102] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.102] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.102] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.102] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.102] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.103] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.103] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.103] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.103] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.103] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.103] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.105] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.105] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.105] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.105] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.105] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.105] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.106] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.106] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.106] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.106] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.106] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.106] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.106] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.107] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.107] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.107] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.107] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.107] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.107] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.107] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.108] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.120] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.120] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.121] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.121] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.121] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.121] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.122] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.122] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.122] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.122] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.122] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.122] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.122] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.123] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.123] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.123] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.123] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.123] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.125] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.125] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.126] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.126] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.126] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.126] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.127] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.127] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.127] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.127] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.127] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.127] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.127] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.128] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.128] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.128] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.128] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.128] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.128] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.128] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.129] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.129] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.129] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.129] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.129] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.129] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.130] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.130] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.130] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.130] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.130] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.130] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.130] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.131] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.131] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.131] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.131] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.131] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.132] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.132] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.132] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.132] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.132] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.132] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.133] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.133] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.133] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.133] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.133] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.133] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.134] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.134] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.134] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.134] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.134] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.134] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.134] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.135] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.135] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.135] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.135] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.135] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.135] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.136] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.136] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.136] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.136] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.136] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.136] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.136] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.137] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.137] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.137] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.137] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.137] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.137] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.137] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.138] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.157] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.157] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.157] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.158] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.158] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.158] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.158] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.158] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.158] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.159] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.159] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.159] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.159] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.159] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.159] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.160] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.160] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.160] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.160] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.160] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.160] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.160] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.161] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.161] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x1e00, lpOverlapped=0x0) returned 1 [0134.161] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffe200, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.161] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x1e00, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x1e00, lpOverlapped=0x0) returned 1 [0134.161] WriteFile (in: hFile=0x110, lpBuffer=0x86438*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x86438*, lpNumberOfBytesWritten=0x24bf114*=0x100, lpOverlapped=0x0) returned 1 [0134.161] CloseHandle (hObject=0x110) returned 1 [0134.261] wnsprintfA (in: pszDest=0x24becb8, cchDest=1024, pszFmt="File encrypted: %S\r\n" | out: pszDest="File encrypted: \\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi\r\n") returned 97 [0134.261] WriteFile (in: hFile=0xfc, lpBuffer=0x24becb8*, nNumberOfBytesToWrite=0x61, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x24becb8*, lpNumberOfBytesWritten=0x24bf114*=0x61, lpOverlapped=0x0) returned 1 [0134.261] wnsprintfW (in: pszDest=0x50f8a0, cchDest=32767, pszFmt="%s_%S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi_9c4rmT6TdKfuH9Ft_{alexbanan@tuta.io}.CORP") returned 121 [0134.261] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi_9c4rmT6TdKfuH9Ft_{alexbanan@tuta.io}.CORP" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi_9c4rmt6tdkfuh9ft_{alexbanan@tuta.io}.corp")) returned 1 [0134.262] wnsprintfA (in: pszDest=0x24becb8, cchDest=1024, pszFmt="File name changed: %S\r\n" | out: pszDest="File name changed: \\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi\r\n") returned 100 [0134.262] WriteFile (in: hFile=0xfc, lpBuffer=0x24becb8*, nNumberOfBytesToWrite=0x64, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x24becb8*, lpNumberOfBytesWritten=0x24bf114*=0x64, lpOverlapped=0x0) returned 1 [0134.262] FindNextFileW (in: hFindFile=0x50e858, lpFindFileData=0x24bf150 | out: lpFindFileData=0x24bf150) returned 1 [0134.262] lstrcmpiW (lpString1="ExcelMUI.xml", lpString2="Windows") returned -1 [0134.262] lstrcmpiW (lpString1="ExcelMUI.xml", lpString2="$Recycle.bin") returned 1 [0134.263] lstrcmpiW (lpString1="ExcelMUI.xml", lpString2="System Volume Information") returned -1 [0134.263] wnsprintfW (in: pszDest=0x4fe850, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml") returned 79 [0134.263] StrStrIW (lpFirst="ExcelMUI.xml", lpSrch=".CORP") returned 0x0 [0134.263] wnsprintfA (in: pszDest=0x24becb8, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml\r\n") returned 105 [0134.263] WriteFile (in: hFile=0xfc, lpBuffer=0x24becb8*, nNumberOfBytesToWrite=0x69, lpNumberOfBytesWritten=0x24bf100, lpOverlapped=0x0 | out: lpBuffer=0x24becb8*, lpNumberOfBytesWritten=0x24bf100*=0x69, lpOverlapped=0x0) returned 1 [0134.263] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0134.263] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x61d, lpOverlapped=0x0) returned 1 [0134.290] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xfffff9e3, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.290] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x61d, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x61d, lpOverlapped=0x0) returned 1 [0134.291] WriteFile (in: hFile=0x110, lpBuffer=0x86438*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x86438*, lpNumberOfBytesWritten=0x24bf114*=0x100, lpOverlapped=0x0) returned 1 [0134.291] CloseHandle (hObject=0x110) returned 1 [0134.293] wnsprintfA (in: pszDest=0x24becb8, cchDest=1024, pszFmt="File encrypted: %S\r\n" | out: pszDest="File encrypted: \\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml\r\n") returned 97 [0134.293] WriteFile (in: hFile=0xfc, lpBuffer=0x24becb8*, nNumberOfBytesToWrite=0x61, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x24becb8*, lpNumberOfBytesWritten=0x24bf114*=0x61, lpOverlapped=0x0) returned 1 [0134.294] wnsprintfW (in: pszDest=0x50f8a0, cchDest=32767, pszFmt="%s_%S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml_9c4rmT6TdKfuH9Ft_{alexbanan@tuta.io}.CORP") returned 121 [0134.294] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml_9c4rmT6TdKfuH9Ft_{alexbanan@tuta.io}.CORP" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml_9c4rmt6tdkfuh9ft_{alexbanan@tuta.io}.corp")) returned 1 [0134.294] wnsprintfA (in: pszDest=0x24becb8, cchDest=1024, pszFmt="File name changed: %S\r\n" | out: pszDest="File name changed: \\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml\r\n") returned 100 [0134.294] WriteFile (in: hFile=0xfc, lpBuffer=0x24becb8*, nNumberOfBytesToWrite=0x64, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x24becb8*, lpNumberOfBytesWritten=0x24bf114*=0x64, lpOverlapped=0x0) returned 1 [0134.294] FindNextFileW (in: hFindFile=0x50e858, lpFindFileData=0x24bf150 | out: lpFindFileData=0x24bf150) returned 1 [0134.294] lstrcmpiW (lpString1="Setup.xml", lpString2="Windows") returned -1 [0134.294] lstrcmpiW (lpString1="Setup.xml", lpString2="$Recycle.bin") returned 1 [0134.294] lstrcmpiW (lpString1="Setup.xml", lpString2="System Volume Information") returned -1 [0134.294] wnsprintfW (in: pszDest=0x4fe850, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 76 [0134.294] StrStrIW (lpFirst="Setup.xml", lpSrch=".CORP") returned 0x0 [0134.294] wnsprintfA (in: pszDest=0x24becb8, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml\r\n") returned 102 [0134.295] WriteFile (in: hFile=0xfc, lpBuffer=0x24becb8*, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0x24bf100, lpOverlapped=0x0 | out: lpBuffer=0x24becb8*, lpNumberOfBytesWritten=0x24bf100*=0x66, lpOverlapped=0x0) returned 1 [0134.295] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0134.309] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x8f8, lpOverlapped=0x0) returned 1 [0134.320] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xfffff708, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.320] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x8f8, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x8f8, lpOverlapped=0x0) returned 1 [0134.320] WriteFile (in: hFile=0x110, lpBuffer=0x86438*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x86438*, lpNumberOfBytesWritten=0x24bf114*=0x100, lpOverlapped=0x0) returned 1 [0134.320] CloseHandle (hObject=0x110) returned 1 [0134.325] wnsprintfA (in: pszDest=0x24becb8, cchDest=1024, pszFmt="File encrypted: %S\r\n" | out: pszDest="File encrypted: \\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml\r\n") returned 94 [0134.325] WriteFile (in: hFile=0xfc, lpBuffer=0x24becb8*, nNumberOfBytesToWrite=0x5e, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x24becb8*, lpNumberOfBytesWritten=0x24bf114*=0x5e, lpOverlapped=0x0) returned 1 [0134.325] wnsprintfW (in: pszDest=0x50f8a0, cchDest=32767, pszFmt="%s_%S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml_9c4rmT6TdKfuH9Ft_{alexbanan@tuta.io}.CORP") returned 118 [0134.326] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml_9c4rmT6TdKfuH9Ft_{alexbanan@tuta.io}.CORP" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml_9c4rmt6tdkfuh9ft_{alexbanan@tuta.io}.corp")) returned 1 [0134.326] wnsprintfA (in: pszDest=0x24becb8, cchDest=1024, pszFmt="File name changed: %S\r\n" | out: pszDest="File name changed: \\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml\r\n") returned 97 [0134.326] WriteFile (in: hFile=0xfc, lpBuffer=0x24becb8*, nNumberOfBytesToWrite=0x61, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x24becb8*, lpNumberOfBytesWritten=0x24bf114*=0x61, lpOverlapped=0x0) returned 1 [0134.326] FindNextFileW (in: hFindFile=0x50e858, lpFindFileData=0x24bf150 | out: lpFindFileData=0x24bf150) returned 0 [0134.326] wnsprintfW (in: pszDest=0x4fe850, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\$%%! NOTE ABOUT FILES -=!-.html") returned 98 [0134.326] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\$%%! NOTE ABOUT FILES -=!-.html" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\$%%! note about files -=!-.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0134.327] WriteFile (in: hFile=0x110, lpBuffer=0x85018*, nNumberOfBytesToWrite=0x647, lpNumberOfBytesWritten=0x24bf118, lpOverlapped=0x0 | out: lpBuffer=0x85018*, lpNumberOfBytesWritten=0x24bf118*=0x647, lpOverlapped=0x0) returned 1 [0134.328] WriteFile (in: hFile=0x110, lpBuffer=0x8655c*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x24bf118, lpOverlapped=0x0 | out: lpBuffer=0x8655c*, lpNumberOfBytesWritten=0x24bf118*=0x10, lpOverlapped=0x0) returned 1 [0134.328] WriteFile (in: hFile=0x110, lpBuffer=0x85660*, nNumberOfBytesToWrite=0x5ac, lpNumberOfBytesWritten=0x24bf118, lpOverlapped=0x0 | out: lpBuffer=0x85660*, lpNumberOfBytesWritten=0x24bf118*=0x5ac, lpOverlapped=0x0) returned 1 [0134.328] WriteFile (in: hFile=0x110, lpBuffer=0x4c4f9a*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x24bf118, lpOverlapped=0x0 | out: lpBuffer=0x4c4f9a*, lpNumberOfBytesWritten=0x24bf118*=0x11, lpOverlapped=0x0) returned 1 [0134.328] WriteFile (in: hFile=0x110, lpBuffer=0x85c10*, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0x24bf118, lpOverlapped=0x0 | out: lpBuffer=0x85c10*, lpNumberOfBytesWritten=0x24bf118*=0x62, lpOverlapped=0x0) returned 1 [0134.328] WriteFile (in: hFile=0x110, lpBuffer=0x4c4fcc*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x24bf118, lpOverlapped=0x0 | out: lpBuffer=0x4c4fcc*, lpNumberOfBytesWritten=0x24bf118*=0x11, lpOverlapped=0x0) returned 1 [0134.328] WriteFile (in: hFile=0x110, lpBuffer=0x85c78*, nNumberOfBytesToWrite=0x2af, lpNumberOfBytesWritten=0x24bf118, lpOverlapped=0x0 | out: lpBuffer=0x85c78*, lpNumberOfBytesWritten=0x24bf118*=0x2af, lpOverlapped=0x0) returned 1 [0134.328] CloseHandle (hObject=0x110) returned 1 [0134.329] FindClose (in: hFindFile=0x50e858 | out: hFindFile=0x50e858) returned 1 [0134.329] FindNextFileW (in: hFindFile=0x4fd808, lpFindFileData=0x24bf3d8 | out: lpFindFileData=0x24bf3d8) returned 1 [0134.329] lstrcmpiW (lpString1="{90140000-0018-0409-1000-0000000FF1CE}-C", lpString2="Windows") returned -1 [0134.329] lstrcmpiW (lpString1="{90140000-0018-0409-1000-0000000FF1CE}-C", lpString2="$Recycle.bin") returned 1 [0134.329] lstrcmpiW (lpString1="{90140000-0018-0409-1000-0000000FF1CE}-C", lpString2="System Volume Information") returned -1 [0134.329] wnsprintfW (in: pszDest=0x4ed800, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C") returned 66 [0134.329] wnsprintfW (in: pszDest=0x4fe850, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\*") returned 68 [0134.329] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x24bf150 | out: lpFindFileData=0x24bf150) returned 0x50e858 [0134.373] lstrcmpiW (lpString1=".", lpString2="Windows") returned -1 [0134.373] lstrcmpiW (lpString1=".", lpString2="$Recycle.bin") returned 1 [0134.373] lstrcmpiW (lpString1=".", lpString2="System Volume Information") returned -1 [0134.373] wnsprintfW (in: pszDest=0x4fe850, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\.") returned 68 [0134.373] StrStrIW (lpFirst=".", lpSrch=".CORP") returned 0x0 [0134.373] wnsprintfA (in: pszDest=0x24becb8, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\.\r\n") returned 94 [0134.373] WriteFile (in: hFile=0xfc, lpBuffer=0x24becb8*, nNumberOfBytesToWrite=0x5e, lpNumberOfBytesWritten=0x24bf100, lpOverlapped=0x0 | out: lpBuffer=0x24becb8*, lpNumberOfBytesWritten=0x24bf100*=0x5e, lpOverlapped=0x0) returned 1 [0134.373] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\." (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\."), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0134.373] GetLastError () returned 0x7b [0134.373] wnsprintfA (in: pszDest=0x24becb8, cchDest=1024, pszFmt="Can't open file (Error: %d): %S\r\n" | out: pszDest="Can't open file (Error: 123): \\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\.\r\n") returned 100 [0134.373] WriteFile (in: hFile=0xfc, lpBuffer=0x24becb8*, nNumberOfBytesToWrite=0x64, lpNumberOfBytesWritten=0x24bf100, lpOverlapped=0x0 | out: lpBuffer=0x24becb8*, lpNumberOfBytesWritten=0x24bf100*=0x64, lpOverlapped=0x0) returned 1 [0134.374] FindNextFileW (in: hFindFile=0x50e858, lpFindFileData=0x24bf150 | out: lpFindFileData=0x24bf150) returned 1 [0134.374] lstrcmpiW (lpString1="..", lpString2="Windows") returned -1 [0134.374] lstrcmpiW (lpString1="..", lpString2="$Recycle.bin") returned 1 [0134.374] lstrcmpiW (lpString1="..", lpString2="System Volume Information") returned -1 [0134.374] wnsprintfW (in: pszDest=0x4fe850, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\..") returned 69 [0134.374] StrStrIW (lpFirst="..", lpSrch=".CORP") returned 0x0 [0134.374] wnsprintfA (in: pszDest=0x24becb8, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\..\r\n") returned 95 [0134.374] WriteFile (in: hFile=0xfc, lpBuffer=0x24becb8*, nNumberOfBytesToWrite=0x5f, lpNumberOfBytesWritten=0x24bf100, lpOverlapped=0x0 | out: lpBuffer=0x24becb8*, lpNumberOfBytesWritten=0x24bf100*=0x5f, lpOverlapped=0x0) returned 1 [0134.374] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\.." (normalized: "c:\\msocache\\all users"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0134.374] GetLastError () returned 0x7b [0134.374] wnsprintfA (in: pszDest=0x24becb8, cchDest=1024, pszFmt="Can't open file (Error: %d): %S\r\n" | out: pszDest="Can't open file (Error: 123): \\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\..\r\n") returned 101 [0134.374] WriteFile (in: hFile=0xfc, lpBuffer=0x24becb8*, nNumberOfBytesToWrite=0x65, lpNumberOfBytesWritten=0x24bf100, lpOverlapped=0x0 | out: lpBuffer=0x24becb8*, lpNumberOfBytesWritten=0x24bf100*=0x65, lpOverlapped=0x0) returned 1 [0134.374] FindNextFileW (in: hFindFile=0x50e858, lpFindFileData=0x24bf150 | out: lpFindFileData=0x24bf150) returned 1 [0134.374] lstrcmpiW (lpString1="PowerPointMUI.msi", lpString2="Windows") returned -1 [0134.374] lstrcmpiW (lpString1="PowerPointMUI.msi", lpString2="$Recycle.bin") returned 1 [0134.374] lstrcmpiW (lpString1="PowerPointMUI.msi", lpString2="System Volume Information") returned -1 [0134.374] wnsprintfW (in: pszDest=0x4fe850, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi") returned 84 [0134.374] StrStrIW (lpFirst="PowerPointMUI.msi", lpSrch=".CORP") returned 0x0 [0134.375] wnsprintfA (in: pszDest=0x24becb8, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi\r\n") returned 110 [0134.375] WriteFile (in: hFile=0xfc, lpBuffer=0x24becb8*, nNumberOfBytesToWrite=0x6e, lpNumberOfBytesWritten=0x24bf100, lpOverlapped=0x0 | out: lpBuffer=0x24becb8*, lpNumberOfBytesWritten=0x24bf100*=0x6e, lpOverlapped=0x0) returned 1 [0134.375] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0134.375] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.439] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.439] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.439] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.473] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.473] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.473] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.473] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.473] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.473] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.473] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.474] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.474] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.474] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.474] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.474] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.474] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.476] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.476] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.476] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.476] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.477] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.477] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.477] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.477] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.477] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.477] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.477] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.477] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.478] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.478] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.478] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.478] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.478] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.478] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.478] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.478] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.555] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.555] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.555] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.556] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.556] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.556] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.556] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.556] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.556] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.556] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.556] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.557] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.557] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.557] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.557] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.557] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.557] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.557] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.558] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.558] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.558] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.675] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.675] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.675] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.676] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.676] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.676] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.676] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.676] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.676] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.676] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.676] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.677] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.677] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.677] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.677] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.677] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.677] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.677] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.677] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.677] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.678] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.678] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.678] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.678] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.678] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.678] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.679] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.679] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.679] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.679] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.679] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.679] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.679] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.680] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.680] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.680] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.680] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.680] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.680] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.680] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.681] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.681] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.681] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.681] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.681] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.682] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.682] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.682] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.683] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.683] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.683] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.683] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.683] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.683] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.683] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.684] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.684] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.684] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.684] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.684] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.684] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.684] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.684] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.685] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.685] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.685] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.685] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.685] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.685] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.685] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.685] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.686] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.686] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.686] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.686] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.755] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.755] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.755] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.755] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.755] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.755] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.756] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.756] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.756] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.756] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.756] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.756] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.756] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.756] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.757] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.757] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.757] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.757] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.757] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.757] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.757] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.757] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.758] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.758] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.758] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.758] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.758] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.758] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.758] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.758] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.759] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.759] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.759] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.759] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.759] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.759] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.761] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.761] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.762] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.762] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.762] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.762] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.762] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.762] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.762] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.762] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.763] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.763] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.763] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.763] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.763] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.763] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.763] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.763] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.764] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.764] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.764] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.764] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.764] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.764] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.764] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.764] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.765] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.765] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.765] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.765] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.765] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.765] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.765] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.765] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.765] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.766] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.766] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.766] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.766] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.767] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.767] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.767] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.768] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.768] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.768] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.768] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.768] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.768] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.768] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.768] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.768] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.769] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.769] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.769] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.769] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.769] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.769] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.769] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.769] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.770] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.770] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.770] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.770] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.770] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.770] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.770] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.770] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.772] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.772] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.773] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.773] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.773] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.773] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.773] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.773] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.773] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.773] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.774] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.775] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.775] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.775] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.775] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.775] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.776] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.776] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.776] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.776] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.776] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.776] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.778] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.779] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.779] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.779] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.779] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.779] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.779] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.780] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.780] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.780] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.780] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.780] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.780] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.780] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.780] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.781] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.781] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.781] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.783] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.783] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.783] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.783] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.783] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.783] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.784] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.784] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.784] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.784] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.784] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.785] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.785] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.785] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.786] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.786] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.786] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.786] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.786] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.786] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.786] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.786] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.787] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.787] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.787] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.787] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.787] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.787] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.787] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.787] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.788] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.798] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.798] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.814] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.818] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.818] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.818] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.819] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.819] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.819] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.819] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.819] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.819] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.820] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.820] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.820] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.820] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.820] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.821] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.821] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.822] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.822] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.823] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.823] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.823] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.823] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.823] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.823] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.823] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.823] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.824] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.824] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.824] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.824] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.824] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.824] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.824] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.825] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.825] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.825] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.825] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.825] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.825] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.825] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.825] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.825] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.827] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.827] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.827] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.828] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.828] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.828] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.828] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.828] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.828] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.829] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.829] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.829] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.829] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.830] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.830] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.830] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.830] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.830] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.830] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.831] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.831] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.831] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.831] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.831] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.831] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.831] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.832] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.832] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.832] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.832] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.832] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.833] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.836] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.836] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.837] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.837] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.837] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.837] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.837] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.837] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.837] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.837] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.838] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.838] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.838] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.838] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.838] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.838] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.840] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.840] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.840] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.841] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.841] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.841] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.841] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.841] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.841] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.842] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.842] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.842] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.842] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.842] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.842] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.843] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.843] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.843] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.843] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.843] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.843] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.843] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.843] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.844] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.844] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.844] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.844] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.844] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.844] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.844] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.844] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.845] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.845] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.845] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.845] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.845] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.845] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.845] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.845] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.846] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.846] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.846] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.846] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.846] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.847] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.847] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.847] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.847] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.847] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.847] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.847] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.848] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.848] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.848] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.848] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.848] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.848] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.848] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.848] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.849] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.849] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.849] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.849] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.849] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.849] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.849] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.849] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.850] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.850] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.850] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.850] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.850] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.850] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.850] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.850] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.851] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.851] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.851] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.851] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.851] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.851] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.858] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.858] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.858] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.858] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.858] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.858] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.858] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.858] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.859] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.859] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.859] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.859] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.860] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.860] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.860] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.860] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.860] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.860] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.860] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.861] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.861] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.861] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.861] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.861] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.861] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.861] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.861] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.862] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.862] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.862] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.862] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.862] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.862] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.863] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.863] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.863] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.863] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.863] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.863] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.863] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.864] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.864] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.865] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.865] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.865] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.865] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.865] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.865] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.865] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.865] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.866] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.866] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.866] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.866] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.866] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.866] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.866] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.866] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.867] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.867] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.867] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.867] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.867] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.867] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.867] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.867] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.868] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.868] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.868] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.868] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.868] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.868] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.870] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.870] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.871] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.871] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.871] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.871] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.879] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.879] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.879] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.879] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.879] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.879] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.879] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.880] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.880] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.880] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.880] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.880] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.880] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.880] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.880] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.881] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.881] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.881] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.881] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.881] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.881] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.881] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.881] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.882] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.882] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.882] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.882] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.882] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.882] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.882] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.883] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.883] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.883] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.883] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.883] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.883] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.883] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.883] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.883] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.884] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.884] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.884] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.884] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.884] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.884] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.885] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.885] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.885] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.885] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.885] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.885] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.885] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.885] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.886] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.916] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.916] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.916] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.916] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.916] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.916] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.917] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.917] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.917] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.918] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.918] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.918] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.918] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.918] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.918] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.918] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.918] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.918] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.925] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.925] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.926] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.926] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.926] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.926] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.926] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.926] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.926] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.927] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.927] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.927] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.927] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.927] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.927] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.927] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.927] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.927] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.928] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.928] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.928] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.928] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.928] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.928] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.928] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.928] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.929] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.929] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.929] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.929] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.929] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.929] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.929] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.929] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.929] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.930] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.931] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.931] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.931] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.931] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.931] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.931] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.931] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.931] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.932] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.932] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.932] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.932] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.932] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.932] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.932] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.932] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.933] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.933] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.933] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.933] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.933] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.933] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.933] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.933] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.934] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.934] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.934] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.934] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.934] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.934] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.934] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.934] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.934] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.935] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.935] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.935] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.935] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.935] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.935] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.936] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.936] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.936] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.936] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.936] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.936] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.936] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.936] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.936] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.937] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.937] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.937] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.937] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.937] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.937] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.937] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.937] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.938] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.938] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.938] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.938] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.938] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.938] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.938] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.938] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.939] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0134.939] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x1400, lpOverlapped=0x0) returned 1 [0134.939] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffec00, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0134.939] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x1400, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x1400, lpOverlapped=0x0) returned 1 [0134.939] WriteFile (in: hFile=0x110, lpBuffer=0x86438*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x86438*, lpNumberOfBytesWritten=0x24bf114*=0x100, lpOverlapped=0x0) returned 1 [0134.940] CloseHandle (hObject=0x110) returned 1 [0135.006] wnsprintfA (in: pszDest=0x24becb8, cchDest=1024, pszFmt="File encrypted: %S\r\n" | out: pszDest="File encrypted: \\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi\r\n") returned 102 [0135.006] WriteFile (in: hFile=0xfc, lpBuffer=0x24becb8*, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x24becb8*, lpNumberOfBytesWritten=0x24bf114*=0x66, lpOverlapped=0x0) returned 1 [0135.006] wnsprintfW (in: pszDest=0x50f8a0, cchDest=32767, pszFmt="%s_%S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi_9c4rmT6TdKfuH9Ft_{alexbanan@tuta.io}.CORP") returned 126 [0135.006] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi_9c4rmT6TdKfuH9Ft_{alexbanan@tuta.io}.CORP" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi_9c4rmt6tdkfuh9ft_{alexbanan@tuta.io}.corp")) returned 1 [0135.007] wnsprintfA (in: pszDest=0x24becb8, cchDest=1024, pszFmt="File name changed: %S\r\n" | out: pszDest="File name changed: \\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi\r\n") returned 105 [0135.007] WriteFile (in: hFile=0xfc, lpBuffer=0x24becb8*, nNumberOfBytesToWrite=0x69, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x24becb8*, lpNumberOfBytesWritten=0x24bf114*=0x69, lpOverlapped=0x0) returned 1 [0135.007] FindNextFileW (in: hFindFile=0x50e858, lpFindFileData=0x24bf150 | out: lpFindFileData=0x24bf150) returned 1 [0135.007] lstrcmpiW (lpString1="PowerPointMUI.xml", lpString2="Windows") returned -1 [0135.007] lstrcmpiW (lpString1="PowerPointMUI.xml", lpString2="$Recycle.bin") returned 1 [0135.007] lstrcmpiW (lpString1="PowerPointMUI.xml", lpString2="System Volume Information") returned -1 [0135.007] wnsprintfW (in: pszDest=0x4fe850, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml") returned 84 [0135.007] StrStrIW (lpFirst="PowerPointMUI.xml", lpSrch=".CORP") returned 0x0 [0135.007] wnsprintfA (in: pszDest=0x24becb8, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml\r\n") returned 110 [0135.007] WriteFile (in: hFile=0xfc, lpBuffer=0x24becb8*, nNumberOfBytesToWrite=0x6e, lpNumberOfBytesWritten=0x24bf100, lpOverlapped=0x0 | out: lpBuffer=0x24becb8*, lpNumberOfBytesWritten=0x24bf100*=0x6e, lpOverlapped=0x0) returned 1 [0135.007] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0135.008] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x5aa, lpOverlapped=0x0) returned 1 [0135.077] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xfffffa56, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.077] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x5aa, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x5aa, lpOverlapped=0x0) returned 1 [0135.077] WriteFile (in: hFile=0x110, lpBuffer=0x86438*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x86438*, lpNumberOfBytesWritten=0x24bf114*=0x100, lpOverlapped=0x0) returned 1 [0135.077] CloseHandle (hObject=0x110) returned 1 [0135.078] wnsprintfA (in: pszDest=0x24becb8, cchDest=1024, pszFmt="File encrypted: %S\r\n" | out: pszDest="File encrypted: \\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml\r\n") returned 102 [0135.078] WriteFile (in: hFile=0xfc, lpBuffer=0x24becb8*, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x24becb8*, lpNumberOfBytesWritten=0x24bf114*=0x66, lpOverlapped=0x0) returned 1 [0135.078] wnsprintfW (in: pszDest=0x50f8a0, cchDest=32767, pszFmt="%s_%S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml_9c4rmT6TdKfuH9Ft_{alexbanan@tuta.io}.CORP") returned 126 [0135.078] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml_9c4rmT6TdKfuH9Ft_{alexbanan@tuta.io}.CORP" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml_9c4rmt6tdkfuh9ft_{alexbanan@tuta.io}.corp")) returned 1 [0135.079] wnsprintfA (in: pszDest=0x24becb8, cchDest=1024, pszFmt="File name changed: %S\r\n" | out: pszDest="File name changed: \\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml\r\n") returned 105 [0135.079] WriteFile (in: hFile=0xfc, lpBuffer=0x24becb8*, nNumberOfBytesToWrite=0x69, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x24becb8*, lpNumberOfBytesWritten=0x24bf114*=0x69, lpOverlapped=0x0) returned 1 [0135.079] FindNextFileW (in: hFindFile=0x50e858, lpFindFileData=0x24bf150 | out: lpFindFileData=0x24bf150) returned 1 [0135.079] lstrcmpiW (lpString1="PptLR.cab", lpString2="Windows") returned -1 [0135.079] lstrcmpiW (lpString1="PptLR.cab", lpString2="$Recycle.bin") returned 1 [0135.079] lstrcmpiW (lpString1="PptLR.cab", lpString2="System Volume Information") returned -1 [0135.079] wnsprintfW (in: pszDest=0x4fe850, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab") returned 76 [0135.079] StrStrIW (lpFirst="PptLR.cab", lpSrch=".CORP") returned 0x0 [0135.079] wnsprintfA (in: pszDest=0x24becb8, cchDest=1024, pszFmt="Trying to encrypt file: %S\r\n" | out: pszDest="Trying to encrypt file: \\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab\r\n") returned 102 [0135.080] WriteFile (in: hFile=0xfc, lpBuffer=0x24becb8*, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0x24bf100, lpOverlapped=0x0 | out: lpBuffer=0x24becb8*, lpNumberOfBytesWritten=0x24bf100*=0x66, lpOverlapped=0x0) returned 1 [0135.080] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0135.081] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.094] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.094] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.094] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.112] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.112] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.112] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.112] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.112] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.112] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.112] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.112] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.112] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.113] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.113] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.113] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.113] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.113] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.113] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.113] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.113] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.114] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.114] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.114] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.114] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.114] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.114] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.114] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.114] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.114] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.115] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.115] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.115] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.115] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.115] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.115] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.115] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.162] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.162] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.162] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.162] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.163] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.163] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.163] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.163] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.163] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.163] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.163] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.164] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.164] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.164] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.164] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.164] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.164] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.164] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.165] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.165] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.165] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.165] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.166] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.166] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.166] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.166] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.166] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.166] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.166] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.166] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.167] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.167] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.167] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.167] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.167] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.167] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.167] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.167] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.168] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.168] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.168] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.168] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.168] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.168] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.168] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.168] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.169] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.169] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.169] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.169] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.169] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.169] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.169] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.169] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.170] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.170] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.170] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.170] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.170] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.170] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.226] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.226] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.226] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.226] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.226] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.226] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.228] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.228] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.228] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.228] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.228] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.229] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.229] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.229] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.229] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.229] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.229] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.229] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.229] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.230] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.230] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.230] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.230] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.230] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.230] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.230] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.230] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.231] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.231] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.231] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.231] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.231] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.231] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.233] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.233] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.233] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.233] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.233] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.233] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.234] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.234] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.234] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.234] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.234] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.234] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.234] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.234] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.235] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.235] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.235] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.235] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.235] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.235] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.235] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.235] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.235] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.236] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.236] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.236] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.236] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.236] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.236] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.236] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.236] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.236] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.236] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.237] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.237] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.237] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.237] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.237] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.237] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.239] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.239] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.239] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.239] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.240] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.240] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.240] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.240] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.240] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.240] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.240] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.240] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.241] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.241] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.242] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.242] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.242] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.242] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.242] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.242] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.243] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.243] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.243] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.243] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.243] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.243] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.243] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.243] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.244] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.244] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.244] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.244] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.244] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.244] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.244] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.244] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.245] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.245] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.245] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.245] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.245] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.246] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.246] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.246] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.246] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.246] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.246] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.246] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.246] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.247] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.247] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.247] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.247] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.247] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.247] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.247] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.248] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.248] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.248] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.248] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.248] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.248] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.248] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.248] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.249] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.249] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.249] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.249] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.249] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.249] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.249] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.250] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.250] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.250] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.250] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.250] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.250] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.250] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.250] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.250] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.251] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.283] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.283] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.283] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.283] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.283] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.283] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.284] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.284] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.284] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.284] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.284] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.284] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.284] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.284] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.285] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.285] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.285] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.285] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.285] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.285] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.285] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.285] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.286] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.286] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.286] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.286] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.286] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.286] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.286] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.286] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.287] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.287] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.287] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.288] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.288] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.288] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.288] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.289] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.289] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.289] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.289] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.289] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.289] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.289] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.289] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.290] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.290] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.290] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.290] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.290] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.290] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.291] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.291] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.291] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.291] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.291] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.291] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.302] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.302] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.303] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.303] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.303] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.303] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.303] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.303] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.303] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.304] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.304] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.304] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.304] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.304] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.304] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.307] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.307] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.307] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.307] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.307] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.307] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.307] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.307] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.308] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.308] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.308] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.308] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.308] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.308] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.308] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.309] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.309] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.309] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.309] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.309] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.309] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.309] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.310] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.310] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.310] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.310] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.310] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.310] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.310] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.311] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.311] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.311] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.311] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.311] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.311] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.311] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.311] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.312] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.312] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.312] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.312] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.312] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.313] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.313] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.313] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.313] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.313] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.313] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.313] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.313] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.314] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.314] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.314] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.314] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.314] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.314] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.314] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.314] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.315] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.315] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.315] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.315] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.315] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.315] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.315] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.315] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.316] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.316] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.316] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.316] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.316] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.316] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.316] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.316] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.317] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.317] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.317] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.317] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.317] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.317] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.317] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.334] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.334] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.334] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.334] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.334] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.335] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.335] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.335] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.335] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.335] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.335] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.335] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.336] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.336] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.336] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.336] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.336] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.336] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.336] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.336] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.337] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.337] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.337] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.337] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.337] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.337] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.337] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.338] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.338] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.338] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.338] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.338] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.338] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.338] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.339] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.339] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.340] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.340] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.340] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.341] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.341] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.341] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.341] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.341] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.341] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.342] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.342] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.342] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.342] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.342] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.342] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.342] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.343] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.343] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.343] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.343] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.343] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.343] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.343] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.343] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.344] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.344] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.344] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.344] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.344] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.344] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.344] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.345] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.345] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.345] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.345] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.345] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.346] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.346] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.346] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.346] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.346] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.346] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.346] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.347] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.347] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.347] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.347] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.347] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.347] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.347] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.347] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.348] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.348] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.348] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.348] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.348] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.348] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.348] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.348] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.349] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.349] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.349] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.349] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.349] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.349] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.349] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.350] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.350] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.350] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.350] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.350] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.350] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.350] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.350] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.351] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.351] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.351] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.351] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.422] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.422] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.422] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.422] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.422] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.422] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.423] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.423] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.423] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.423] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.423] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.423] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.423] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.423] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.423] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.424] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.424] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.424] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.424] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.424] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.424] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.424] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.424] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.425] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.425] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.425] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.425] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.425] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.425] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.425] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.425] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.425] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.425] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.426] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.426] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.426] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.426] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.426] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.426] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.479] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.479] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.479] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.479] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.479] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.479] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.480] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.480] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.480] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.480] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.480] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.480] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.480] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.480] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.480] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.481] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.481] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.481] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.481] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.481] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.481] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.481] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.481] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.482] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.482] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.482] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.482] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.482] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.482] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.482] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.482] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.482] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.482] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.483] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.483] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.483] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.483] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.483] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.483] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.484] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.484] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.484] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.484] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.484] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.484] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.484] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.484] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.484] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.485] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.485] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.485] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.485] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.485] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.485] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.485] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.485] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.485] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.495] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.495] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.496] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.496] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.496] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.496] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.496] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.496] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.497] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.497] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.497] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.497] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.497] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.497] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.497] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.498] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.498] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.498] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.498] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.498] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.498] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.539] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.539] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.540] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.540] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.540] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.540] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.540] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.540] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.540] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.541] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.541] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.541] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.541] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.541] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.541] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.541] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.541] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.542] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.542] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.542] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.542] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.542] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.542] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.542] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.543] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.543] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.543] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.543] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.543] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.543] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.543] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.543] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.544] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.557] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.557] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.558] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.558] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.558] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.558] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.558] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.558] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.559] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.559] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.559] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.559] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.560] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.560] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.560] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.560] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.560] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.560] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.560] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.560] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.561] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.561] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.561] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.561] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.561] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.561] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.562] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.562] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.562] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.562] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.562] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.562] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.562] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.563] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.563] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.563] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.563] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.563] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.563] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.563] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.564] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.564] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.659] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.659] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.659] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.659] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.659] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.660] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.660] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.660] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.660] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.660] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.660] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.660] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.661] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.661] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.661] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.661] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.661] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.661] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.661] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.661] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.662] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.662] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.662] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.662] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.662] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.662] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.662] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.662] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.663] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.663] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.663] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.663] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.663] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.663] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.663] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.663] ReadFile (in: hFile=0x110, lpBuffer=0x50f8a0, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesRead=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 [0135.663] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.664] WriteFile (in: hFile=0x110, lpBuffer=0x50f8a0*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x24bf114, lpOverlapped=0x0 | out: lpBuffer=0x50f8a0*, lpNumberOfBytesWritten=0x24bf114*=0x2800, lpOverlapped=0x0) returned 1 Process: id = "3" image_name = "cmd.exe" filename = "c:\\windows\\syswow64\\cmd.exe" page_root = "0x3b1f1000" os_pid = "0xad0" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0xaac" cmd_line = "/c \"C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\1296.tmp.bat\"" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000ea88" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 337 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 338 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 339 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 340 start_va = 0x50000 end_va = 0x53fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 341 start_va = 0x60000 end_va = 0x60fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 342 start_va = 0x1d0000 end_va = 0x20ffff entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 343 start_va = 0x2e0000 end_va = 0x3dffff entry_point = 0x0 region_type = private name = "private_0x00000000002e0000" filename = "" Region: id = 344 start_va = 0x49f80000 end_va = 0x49fcbfff entry_point = 0x49f80000 region_type = mapped_file name = "cmd.exe" filename = "\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe") Region: id = 345 start_va = 0x77670000 end_va = 0x77818fff entry_point = 0x77670000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 346 start_va = 0x77850000 end_va = 0x779cffff entry_point = 0x77850000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 347 start_va = 0x7efb0000 end_va = 0x7efd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 348 start_va = 0x7efdb000 end_va = 0x7efddfff entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 349 start_va = 0x7efde000 end_va = 0x7efdefff entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 350 start_va = 0x7efdf000 end_va = 0x7efdffff entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 351 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 352 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 353 start_va = 0x7fff0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 361 start_va = 0x130000 end_va = 0x1affff entry_point = 0x0 region_type = private name = "private_0x0000000000130000" filename = "" Region: id = 362 start_va = 0x74d90000 end_va = 0x74d97fff entry_point = 0x74d90000 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 363 start_va = 0x74da0000 end_va = 0x74dfbfff entry_point = 0x74da0000 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 364 start_va = 0x74e00000 end_va = 0x74e3efff entry_point = 0x74e00000 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 451 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 452 start_va = 0x20000 end_va = 0x2ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 453 start_va = 0x70000 end_va = 0xd6fff entry_point = 0x70000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 454 start_va = 0x260000 end_va = 0x26ffff entry_point = 0x0 region_type = private name = "private_0x0000000000260000" filename = "" Region: id = 455 start_va = 0x4a0000 end_va = 0x59ffff entry_point = 0x0 region_type = private name = "private_0x00000000004a0000" filename = "" Region: id = 456 start_va = 0x75270000 end_va = 0x75276fff entry_point = 0x75270000 region_type = mapped_file name = "winbrand.dll" filename = "\\Windows\\SysWOW64\\winbrand.dll" (normalized: "c:\\windows\\syswow64\\winbrand.dll") Region: id = 457 start_va = 0x753a0000 end_va = 0x753abfff entry_point = 0x753a0000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 458 start_va = 0x753b0000 end_va = 0x7540ffff entry_point = 0x753b0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 459 start_va = 0x75410000 end_va = 0x754acfff entry_point = 0x75410000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 460 start_va = 0x756f0000 end_va = 0x757effff entry_point = 0x756f0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 461 start_va = 0x75a20000 end_va = 0x75b2ffff entry_point = 0x75a20000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 462 start_va = 0x75b30000 end_va = 0x75bcffff entry_point = 0x75b30000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 463 start_va = 0x75e30000 end_va = 0x75edbfff entry_point = 0x75e30000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 464 start_va = 0x762b0000 end_va = 0x762c8fff entry_point = 0x762b0000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 465 start_va = 0x762d0000 end_va = 0x762d9fff entry_point = 0x762d0000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 466 start_va = 0x765f0000 end_va = 0x76635fff entry_point = 0x765f0000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 467 start_va = 0x772d0000 end_va = 0x773bffff entry_point = 0x772d0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 468 start_va = 0x773c0000 end_va = 0x7744ffff entry_point = 0x773c0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 469 start_va = 0x77450000 end_va = 0x77549fff entry_point = 0x0 region_type = private name = "private_0x0000000077450000" filename = "" Region: id = 470 start_va = 0x77550000 end_va = 0x7766efff entry_point = 0x0 region_type = private name = "private_0x0000000077550000" filename = "" Region: id = 471 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 472 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 473 start_va = 0x5a0000 end_va = 0x727fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005a0000" filename = "" Region: id = 474 start_va = 0x75d40000 end_va = 0x75e0bfff entry_point = 0x75d40000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 475 start_va = 0x76500000 end_va = 0x7655ffff entry_point = 0x76500000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 476 start_va = 0x30000 end_va = 0x36fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 477 start_va = 0xe0000 end_va = 0xe1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 478 start_va = 0xf0000 end_va = 0xf0fff entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 479 start_va = 0x100000 end_va = 0x100fff entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 480 start_va = 0x730000 end_va = 0x8b0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000730000" filename = "" Region: id = 481 start_va = 0x8c0000 end_va = 0x1cbffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008c0000" filename = "" Region: id = 482 start_va = 0x1cc0000 end_va = 0x2002fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001cc0000" filename = "" Region: id = 483 start_va = 0x110000 end_va = 0x11ffff entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 507 start_va = 0x3e0000 end_va = 0x49ffff entry_point = 0x3e0000 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\kernelbase.dll.mui") Thread: id = 7 os_tid = 0xad4 [0128.378] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x3df8c4 | out: lpSystemTimeAsFileTime=0x3df8c4*(dwLowDateTime=0x6500dc80, dwHighDateTime=0x1d4a43b)) [0128.378] GetCurrentProcessId () returned 0xad0 [0128.378] GetCurrentThreadId () returned 0xad4 [0128.378] GetTickCount () returned 0x21506 [0128.379] QueryPerformanceCounter (in: lpPerformanceCount=0x3df8bc | out: lpPerformanceCount=0x3df8bc*=1813047200000) returned 1 [0128.380] GetModuleHandleA (lpModuleName=0x0) returned 0x49f80000 [0128.380] __set_app_type (_Type=0x1) [0128.380] __p__fmode () returned 0x75ed31f4 [0128.391] __p__commode () returned 0x75ed31fc [0128.391] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x49fa21a6) returned 0x0 [0128.391] __getmainargs (in: _Argc=0x49fa4238, _Argv=0x49fa4240, _Env=0x49fa423c, _DoWildCard=0, _StartInfo=0x49fa4140 | out: _Argc=0x49fa4238, _Argv=0x49fa4240, _Env=0x49fa423c) returned 0 [0128.391] GetCurrentThreadId () returned 0xad4 [0128.391] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xad4) returned 0x60 [0128.391] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75a20000 [0128.392] GetProcAddress (hModule=0x75a20000, lpProcName="SetThreadUILanguage") returned 0x75a4a84f [0128.392] SetThreadUILanguage (LangId=0x0) returned 0x409 [0128.392] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0128.392] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x3df854 | out: phkResult=0x3df854*=0x0) returned 0x2 [0128.392] VirtualQuery (in: lpAddress=0x3df88b, lpBuffer=0x3df824, dwLength=0x1c | out: lpBuffer=0x3df824*(BaseAddress=0x3df000, AllocationBase=0x2e0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0128.392] VirtualQuery (in: lpAddress=0x2e0000, lpBuffer=0x3df824, dwLength=0x1c | out: lpBuffer=0x3df824*(BaseAddress=0x2e0000, AllocationBase=0x2e0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c [0128.392] VirtualQuery (in: lpAddress=0x2e1000, lpBuffer=0x3df824, dwLength=0x1c | out: lpBuffer=0x3df824*(BaseAddress=0x2e1000, AllocationBase=0x2e0000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c [0128.392] VirtualQuery (in: lpAddress=0x2e3000, lpBuffer=0x3df824, dwLength=0x1c | out: lpBuffer=0x3df824*(BaseAddress=0x2e3000, AllocationBase=0x2e0000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0128.392] VirtualQuery (in: lpAddress=0x3e0000, lpBuffer=0x3df824, dwLength=0x1c | out: lpBuffer=0x3df824*(BaseAddress=0x3e0000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xc0000, State=0x10000, Protect=0x1, Type=0x0)) returned 0x1c [0128.392] GetConsoleOutputCP () returned 0x1b5 [0128.393] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x49fa4260 | out: lpCPInfo=0x49fa4260) returned 1 [0128.393] SetConsoleCtrlHandler (HandlerRoutine=0x49f9e72a, Add=1) returned 1 [0128.393] _get_osfhandle (_FileHandle=1) returned 0x7 [0128.393] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x0) returned 1 [0128.445] _get_osfhandle (_FileHandle=1) returned 0x7 [0128.445] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x49fa41ac | out: lpMode=0x49fa41ac) returned 1 [0128.445] _get_osfhandle (_FileHandle=1) returned 0x7 [0128.446] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0128.446] _get_osfhandle (_FileHandle=0) returned 0x3 [0128.446] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x49fa41b0 | out: lpMode=0x49fa41b0) returned 1 [0128.448] _get_osfhandle (_FileHandle=0) returned 0x3 [0128.448] SetConsoleMode (hConsoleHandle=0x3, dwMode=0x1a7) returned 1 [0128.449] GetEnvironmentStringsW () returned 0x4b2030* [0128.449] FreeEnvironmentStringsW (penv=0x4b2030) returned 1 [0128.449] GetEnvironmentStringsW () returned 0x4b2030* [0128.449] FreeEnvironmentStringsW (penv=0x4b2030) returned 1 [0128.449] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x3de7c4 | out: phkResult=0x3de7c4*=0x68) returned 0x0 [0128.449] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x3de7cc, lpData=0x3de7d0, lpcbData=0x3de7c8*=0x1000 | out: lpType=0x3de7cc*=0x0, lpData=0x3de7d0*=0x0, lpcbData=0x3de7c8*=0x1000) returned 0x2 [0128.449] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x3de7cc, lpData=0x3de7d0, lpcbData=0x3de7c8*=0x1000 | out: lpType=0x3de7cc*=0x4, lpData=0x3de7d0*=0x1, lpcbData=0x3de7c8*=0x4) returned 0x0 [0128.450] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x3de7cc, lpData=0x3de7d0, lpcbData=0x3de7c8*=0x1000 | out: lpType=0x3de7cc*=0x0, lpData=0x3de7d0*=0x1, lpcbData=0x3de7c8*=0x1000) returned 0x2 [0128.450] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x3de7cc, lpData=0x3de7d0, lpcbData=0x3de7c8*=0x1000 | out: lpType=0x3de7cc*=0x4, lpData=0x3de7d0*=0x0, lpcbData=0x3de7c8*=0x4) returned 0x0 [0128.450] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x3de7cc, lpData=0x3de7d0, lpcbData=0x3de7c8*=0x1000 | out: lpType=0x3de7cc*=0x4, lpData=0x3de7d0*=0x40, lpcbData=0x3de7c8*=0x4) returned 0x0 [0128.450] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x3de7cc, lpData=0x3de7d0, lpcbData=0x3de7c8*=0x1000 | out: lpType=0x3de7cc*=0x4, lpData=0x3de7d0*=0x40, lpcbData=0x3de7c8*=0x4) returned 0x0 [0128.450] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x3de7cc, lpData=0x3de7d0, lpcbData=0x3de7c8*=0x1000 | out: lpType=0x3de7cc*=0x0, lpData=0x3de7d0*=0x40, lpcbData=0x3de7c8*=0x1000) returned 0x2 [0128.450] RegCloseKey (hKey=0x68) returned 0x0 [0128.450] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x3de7c4 | out: phkResult=0x3de7c4*=0x68) returned 0x0 [0128.450] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x3de7cc, lpData=0x3de7d0, lpcbData=0x3de7c8*=0x1000 | out: lpType=0x3de7cc*=0x0, lpData=0x3de7d0*=0x40, lpcbData=0x3de7c8*=0x1000) returned 0x2 [0128.450] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x3de7cc, lpData=0x3de7d0, lpcbData=0x3de7c8*=0x1000 | out: lpType=0x3de7cc*=0x4, lpData=0x3de7d0*=0x1, lpcbData=0x3de7c8*=0x4) returned 0x0 [0128.450] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x3de7cc, lpData=0x3de7d0, lpcbData=0x3de7c8*=0x1000 | out: lpType=0x3de7cc*=0x0, lpData=0x3de7d0*=0x1, lpcbData=0x3de7c8*=0x1000) returned 0x2 [0128.450] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x3de7cc, lpData=0x3de7d0, lpcbData=0x3de7c8*=0x1000 | out: lpType=0x3de7cc*=0x4, lpData=0x3de7d0*=0x0, lpcbData=0x3de7c8*=0x4) returned 0x0 [0128.450] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x3de7cc, lpData=0x3de7d0, lpcbData=0x3de7c8*=0x1000 | out: lpType=0x3de7cc*=0x4, lpData=0x3de7d0*=0x9, lpcbData=0x3de7c8*=0x4) returned 0x0 [0128.450] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x3de7cc, lpData=0x3de7d0, lpcbData=0x3de7c8*=0x1000 | out: lpType=0x3de7cc*=0x4, lpData=0x3de7d0*=0x9, lpcbData=0x3de7c8*=0x4) returned 0x0 [0128.450] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x3de7cc, lpData=0x3de7d0, lpcbData=0x3de7c8*=0x1000 | out: lpType=0x3de7cc*=0x0, lpData=0x3de7d0*=0x9, lpcbData=0x3de7c8*=0x1000) returned 0x2 [0128.450] RegCloseKey (hKey=0x68) returned 0x0 [0128.450] time (in: timer=0x0 | out: timer=0x0) returned 0x5c2f704a [0128.450] srand (_Seed=0x5c2f704a) [0128.450] GetCommandLineW () returned="/c \"C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\1296.tmp.bat\"" [0128.451] GetCommandLineW () returned="/c \"C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\1296.tmp.bat\"" [0128.451] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x49fa5260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0128.452] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x4b2038, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b [0128.453] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x49fb0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0128.453] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x49fb0640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0128.453] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x49fb0640, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0128.453] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0128.453] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0128.453] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0128.453] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0128.453] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0128.453] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0128.453] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0128.453] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0128.453] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0128.453] GetEnvironmentStringsW () returned 0x4b2248* [0128.453] FreeEnvironmentStringsW (penv=0x4b2248) returned 1 [0128.454] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x49fb0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0128.454] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x49fb0640, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0128.454] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0128.454] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0128.454] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0128.454] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0128.454] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0128.454] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0128.454] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0128.454] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0128.454] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x3df590 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0128.454] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x3df590, lpFilePart=0x3df58c | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x3df58c*="Desktop") returned 0x25 [0128.454] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11 [0128.454] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x3df30c | out: lpFindFileData=0x3df30c) returned 0x4b1eb0 [0128.454] FindClose (in: hFindFile=0x4b1eb0 | out: hFindFile=0x4b1eb0) returned 1 [0128.454] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x3df30c | out: lpFindFileData=0x3df30c) returned 0x4b1eb0 [0128.454] FindClose (in: hFindFile=0x4b1eb0 | out: hFindFile=0x4b1eb0) returned 1 [0128.455] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20 [0128.455] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x3df30c | out: lpFindFileData=0x3df30c) returned 0x4b1eb0 [0128.455] FindClose (in: hFindFile=0x4b1eb0 | out: hFindFile=0x4b1eb0) returned 1 [0128.455] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11 [0128.455] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1 [0128.455] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1 [0128.455] GetEnvironmentStringsW () returned 0x4b40b8* [0128.455] FreeEnvironmentStringsW (penv=0x4b40b8) returned 1 [0128.455] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x49fa5260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0128.458] GetConsoleOutputCP () returned 0x1b5 [0128.458] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x49fa4260 | out: lpCPInfo=0x49fa4260) returned 1 [0128.458] GetUserDefaultLCID () returned 0x409 [0128.459] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x49fa4950, cchData=8 | out: lpLCData=":") returned 2 [0128.459] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x3df6d0, cchData=128 | out: lpLCData="0") returned 2 [0128.459] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x3df6d0, cchData=128 | out: lpLCData="0") returned 2 [0128.459] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x3df6d0, cchData=128 | out: lpLCData="1") returned 2 [0128.459] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x49fa4940, cchData=8 | out: lpLCData="/") returned 2 [0128.459] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x49fa4d80, cchData=32 | out: lpLCData="Mon") returned 4 [0128.459] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x49fa4d40, cchData=32 | out: lpLCData="Tue") returned 4 [0128.459] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x49fa4d00, cchData=32 | out: lpLCData="Wed") returned 4 [0128.459] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x49fa4cc0, cchData=32 | out: lpLCData="Thu") returned 4 [0128.459] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x49fa4c80, cchData=32 | out: lpLCData="Fri") returned 4 [0128.459] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x49fa4c40, cchData=32 | out: lpLCData="Sat") returned 4 [0128.459] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x49fa4c00, cchData=32 | out: lpLCData="Sun") returned 4 [0128.459] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x49fa4930, cchData=8 | out: lpLCData=".") returned 2 [0128.459] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x49fa4920, cchData=8 | out: lpLCData=",") returned 2 [0128.460] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0128.461] GetConsoleTitleW (in: lpConsoleTitle=0x4b2d88, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0128.461] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75a20000 [0128.461] GetProcAddress (hModule=0x75a20000, lpProcName="CopyFileExW") returned 0x75a53b92 [0128.461] GetProcAddress (hModule=0x75a20000, lpProcName="IsDebuggerPresent") returned 0x75a34a5d [0128.461] GetProcAddress (hModule=0x75a20000, lpProcName="SetConsoleInputExeNameW") returned 0x75a4a79d [0128.466] _wcsicmp (_String1="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\1296.tmp.bat", _String2=")") returned 58 [0128.466] _wcsicmp (_String1="FOR", _String2="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\1296.tmp.bat") returned 3 [0128.466] _wcsicmp (_String1="FOR/?", _String2="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\1296.tmp.bat") returned 3 [0128.466] _wcsicmp (_String1="IF", _String2="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\1296.tmp.bat") returned 6 [0128.466] _wcsicmp (_String1="IF/?", _String2="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\1296.tmp.bat") returned 6 [0128.466] _wcsicmp (_String1="REM", _String2="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\1296.tmp.bat") returned 15 [0128.466] _wcsicmp (_String1="REM/?", _String2="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\1296.tmp.bat") returned 15 [0128.467] GetConsoleTitleW (in: lpConsoleTitle=0x3df3c8, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0128.467] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0128.467] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0128.467] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x3df184, nVolumeNameSize=0x104, lpVolumeSerialNumber=0x3df17c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer="SYSTEM", lpVolumeSerialNumber=0x3df17c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0128.468] _wcsnicmp (_String1="C:\\U", _String2="cmd ", _MaxCount=0x4) returned -51 [0128.469] SetErrorMode (uMode=0x0) returned 0x0 [0128.469] SetErrorMode (uMode=0x1) returned 0x0 [0128.469] GetFullPathNameW (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\.", nBufferLength=0x208, lpBuffer=0x4a07f8, lpFilePart=0x3deee8 | out: lpBuffer="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", lpFilePart=0x3deee8*="Temp") returned 0x24 [0128.469] SetErrorMode (uMode=0x0) returned 0x1 [0128.469] NeedCurrentDirectoryForExePathW (ExeName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\.") returned 1 [0128.469] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x49fb0640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0128.475] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0128.475] FindFirstFileExW (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\1296.tmp.bat", fInfoLevelId=0x1, lpFindFileData=0x3dec84, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x3dec84) returned 0x4b3448 [0128.476] FindClose (in: hFindFile=0x4b3448 | out: hFindFile=0x4b3448) returned 1 [0128.476] _wcsicmp (_String1=".bat", _String2=".CMD") returned -1 [0128.476] _wcsicmp (_String1=".bat", _String2=".BAT") returned 0 [0128.476] GetConsoleTitleW (in: lpConsoleTitle=0x3df15c, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0128.477] LoadLibraryExA (lpLibFileName="ADVAPI32.dll", hFile=0x0, dwFlags=0x0) returned 0x75b30000 [0128.478] GetProcAddress (hModule=0x75b30000, lpProcName="SaferIdentifyLevel") returned 0x75b52102 [0128.478] IdentifyCodeAuthzLevelW () returned 0x1 [0128.487] GetProcAddress (hModule=0x75b30000, lpProcName="SaferComputeTokenFromLevel") returned 0x75b53352 [0128.487] ComputeAccessTokenFromCodeAuthzLevel () returned 0x1 [0128.487] GetProcAddress (hModule=0x75b30000, lpProcName="SaferCloseLevel") returned 0x75b53825 [0128.487] CloseCodeAuthzLevel () returned 0x1 [0128.487] SetErrorMode (uMode=0x0) returned 0x0 [0128.487] SetErrorMode (uMode=0x1) returned 0x0 [0128.487] GetFullPathNameW (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\1296.tmp.bat", nBufferLength=0x104, lpBuffer=0x4b3080, lpFilePart=0x3df048 | out: lpBuffer="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\1296.tmp.bat", lpFilePart=0x3df048*="1296.tmp.bat") returned 0x31 [0128.487] SetErrorMode (uMode=0x0) returned 0x1 [0129.538] CmdBatNotification () returned 0x4b30e0 [0129.538] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\1296.tmp.bat" (normalized: "c:\\users\\5p5nrg~1\\appdata\\local\\temp\\1296.tmp.bat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x3df08c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x78 [0129.539] _open_osfhandle (_OSFileHandle=0x78, _Flags=8) returned 3 [0129.539] _get_osfhandle (_FileHandle=3) returned 0x78 [0129.539] SetFilePointer (in: hFile=0x78, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0129.539] _get_osfhandle (_FileHandle=3) returned 0x78 [0129.539] SetFilePointer (in: hFile=0x78, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0129.539] ReadFile (in: hFile=0x78, lpBuffer=0x49fa6640, nNumberOfBytesToRead=0x1fff, lpNumberOfBytesRead=0x3df070, lpOverlapped=0x0 | out: lpBuffer=0x49fa6640*, lpNumberOfBytesRead=0x3df070*=0x135, lpOverlapped=0x0) returned 1 [0129.539] SetFilePointer (in: hFile=0x78, lDistanceToMove=11, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xb [0129.539] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x49fa6640, cbMultiByte=11, lpWideCharStr=0x49fac640, cchWideChar=8191 | out: lpWideCharStr="@echo off\r\n") returned 11 [0129.540] _get_osfhandle (_FileHandle=3) returned 0x78 [0129.540] GetFileType (hFile=0x78) returned 0x1 [0129.540] _get_osfhandle (_FileHandle=3) returned 0x78 [0129.540] SetFilePointer (in: hFile=0x78, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0xb [0129.540] _wcsicmp (_String1="echo", _String2=")") returned 60 [0129.541] _wcsicmp (_String1="FOR", _String2="echo") returned 1 [0129.541] _wcsicmp (_String1="FOR/?", _String2="echo") returned 1 [0129.541] _wcsicmp (_String1="IF", _String2="echo") returned 4 [0129.541] _wcsicmp (_String1="IF/?", _String2="echo") returned 4 [0129.541] _wcsicmp (_String1="REM", _String2="echo") returned 13 [0129.541] _wcsicmp (_String1="REM/?", _String2="echo") returned 13 [0129.542] _tell (_FileHandle=3) returned 11 [0129.543] _close (_FileHandle=3) returned 0 [0129.543] _wcsicmp (_String1="echo", _String2="DIR") returned 1 [0129.543] _wcsicmp (_String1="echo", _String2="ERASE") returned -15 [0129.543] _wcsicmp (_String1="echo", _String2="DEL") returned 1 [0129.543] _wcsicmp (_String1="echo", _String2="TYPE") returned -15 [0129.543] _wcsicmp (_String1="echo", _String2="COPY") returned 2 [0129.543] _wcsicmp (_String1="echo", _String2="CD") returned 2 [0129.543] _wcsicmp (_String1="echo", _String2="CHDIR") returned 2 [0129.543] _wcsicmp (_String1="echo", _String2="RENAME") returned -13 [0129.543] _wcsicmp (_String1="echo", _String2="REN") returned -13 [0129.543] _wcsicmp (_String1="echo", _String2="ECHO") returned 0 [0129.543] GetConsoleTitleW (in: lpConsoleTitle=0x3dec54, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0129.544] _wcsicmp (_String1="echo", _String2="DIR") returned 1 [0129.544] _wcsicmp (_String1="echo", _String2="ERASE") returned -15 [0129.544] _wcsicmp (_String1="echo", _String2="DEL") returned 1 [0129.544] _wcsicmp (_String1="echo", _String2="TYPE") returned -15 [0129.544] _wcsicmp (_String1="echo", _String2="COPY") returned 2 [0129.544] _wcsicmp (_String1="echo", _String2="CD") returned 2 [0129.544] _wcsicmp (_String1="echo", _String2="CHDIR") returned 2 [0129.544] _wcsicmp (_String1="echo", _String2="RENAME") returned -13 [0129.544] _wcsicmp (_String1="echo", _String2="REN") returned -13 [0129.544] _wcsicmp (_String1="echo", _String2="ECHO") returned 0 [0129.545] _wcsnicmp (_String1="off", _String2="off", _MaxCount=0x3) returned 0 [0129.545] _get_osfhandle (_FileHandle=1) returned 0x7 [0129.545] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0129.545] _get_osfhandle (_FileHandle=1) returned 0x7 [0129.545] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x49fa41ac | out: lpMode=0x49fa41ac) returned 1 [0129.545] _get_osfhandle (_FileHandle=0) returned 0x3 [0129.545] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x49fa41b0 | out: lpMode=0x49fa41b0) returned 1 [0129.546] SetConsoleInputExeNameW () returned 0x1 [0129.546] GetConsoleOutputCP () returned 0x1b5 [0129.546] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x49fa4260 | out: lpCPInfo=0x49fa4260) returned 1 [0129.546] SetThreadUILanguage (LangId=0x0) returned 0x409 [0129.546] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\1296.tmp.bat" (normalized: "c:\\users\\5p5nrg~1\\appdata\\local\\temp\\1296.tmp.bat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x3df08c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x78 [0129.546] _open_osfhandle (_OSFileHandle=0x78, _Flags=8) returned 3 [0129.546] _get_osfhandle (_FileHandle=3) returned 0x78 [0129.546] SetFilePointer (in: hFile=0x78, lDistanceToMove=11, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xb [0129.547] _get_osfhandle (_FileHandle=3) returned 0x78 [0129.547] SetFilePointer (in: hFile=0x78, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0xb [0129.547] ReadFile (in: hFile=0x78, lpBuffer=0x49fa6640, nNumberOfBytesToRead=0x1fff, lpNumberOfBytesRead=0x3df070, lpOverlapped=0x0 | out: lpBuffer=0x49fa6640*, lpNumberOfBytesRead=0x3df070*=0x12a, lpOverlapped=0x0) returned 1 [0129.547] SetFilePointer (in: hFile=0x78, lDistanceToMove=15, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf [0129.547] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x49fa6640, cbMultiByte=4, lpWideCharStr=0x49fac640, cchWideChar=8191 | out: lpWideCharStr=":d\r\no off\r\n") returned 4 [0129.547] _get_osfhandle (_FileHandle=3) returned 0x78 [0129.547] GetFileType (hFile=0x78) returned 0x1 [0129.547] _get_osfhandle (_FileHandle=3) returned 0x78 [0129.547] SetFilePointer (in: hFile=0x78, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0xf [0129.548] _tell (_FileHandle=3) returned 15 [0129.548] _close (_FileHandle=3) returned 0 [0129.548] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\1296.tmp.bat" (normalized: "c:\\users\\5p5nrg~1\\appdata\\local\\temp\\1296.tmp.bat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x3df08c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x78 [0129.548] _open_osfhandle (_OSFileHandle=0x78, _Flags=8) returned 3 [0129.548] _get_osfhandle (_FileHandle=3) returned 0x78 [0129.548] SetFilePointer (in: hFile=0x78, lDistanceToMove=15, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf [0129.548] _get_osfhandle (_FileHandle=3) returned 0x78 [0129.548] SetFilePointer (in: hFile=0x78, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0xf [0129.548] ReadFile (in: hFile=0x78, lpBuffer=0x49fa6640, nNumberOfBytesToRead=0x1fff, lpNumberOfBytesRead=0x3df070, lpOverlapped=0x0 | out: lpBuffer=0x49fa6640*, lpNumberOfBytesRead=0x3df070*=0x126, lpOverlapped=0x0) returned 1 [0129.549] SetFilePointer (in: hFile=0x78, lDistanceToMove=126, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7e [0129.549] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x49fa6640, cbMultiByte=111, lpWideCharStr=0x49fac640, cchWideChar=8191 | out: lpWideCharStr="del \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\%APPDATA%roamingmicrosoftwindowsstart menuprogramsstartup8gfg.exe\"\r\n") returned 111 [0129.549] _get_osfhandle (_FileHandle=3) returned 0x78 [0129.549] GetFileType (hFile=0x78) returned 0x1 [0129.549] _get_osfhandle (_FileHandle=3) returned 0x78 [0129.549] SetFilePointer (in: hFile=0x78, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x7e [0129.549] GetEnvironmentVariableW (in: lpName="APPDATA", lpBuffer=0x49fb0640, nSize=0x2000 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x2d [0129.550] _wcsicmp (_String1="del", _String2=")") returned 59 [0129.550] _wcsicmp (_String1="FOR", _String2="del") returned 2 [0129.550] _wcsicmp (_String1="FOR/?", _String2="del") returned 2 [0129.550] _wcsicmp (_String1="IF", _String2="del") returned 5 [0129.550] _wcsicmp (_String1="IF/?", _String2="del") returned 5 [0129.550] _wcsicmp (_String1="REM", _String2="del") returned 14 [0129.550] _wcsicmp (_String1="REM/?", _String2="del") returned 14 [0129.554] _tell (_FileHandle=3) returned 126 [0129.554] _close (_FileHandle=3) returned 0 [0129.555] _wcsicmp (_String1="del", _String2="DIR") returned -4 [0129.555] _wcsicmp (_String1="del", _String2="ERASE") returned -1 [0129.555] _wcsicmp (_String1="del", _String2="DEL") returned 0 [0129.555] GetConsoleTitleW (in: lpConsoleTitle=0x3dec54, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0129.588] GetCurrentDirectoryW (in: nBufferLength=0x106, lpBuffer=0x3dea0c | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0129.588] GetCurrentDirectoryW (in: nBufferLength=0x106, lpBuffer=0x3dda9c | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0129.591] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x0, lpVolumeSerialNumber=0x0, lpMaximumComponentLength=0x3ddccc, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x3ddcd0, nFileSystemNameSize=0x106 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x0, lpMaximumComponentLength=0x3ddccc*=0xff, lpFileSystemFlags=0x0, lpFileSystemNameBuffer="NTFS") returned 1 [0129.591] _wcsicmp (_String1="NTFS", _String2="FAT") returned 8 [0129.591] _wcsicmp (_String1="Roamingroamingmicrosoftwindowsstart menuprogramsstartup8gfg.exe", _String2=".") returned 68 [0129.591] _wcsicmp (_String1="Roamingroamingmicrosoftwindowsstart menuprogramsstartup8gfg.exe", _String2="..") returned 68 [0129.591] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roamingroamingmicrosoftwindowsstart menuprogramsstartup8gfg.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roamingroamingmicrosoftwindowsstart menuprogramsstartup8gfg.exe")) returned 0xffffffff [0129.591] GetLastError () returned 0x7b [0129.591] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4b47e0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0129.592] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roamingroamingmicrosoftwindowsstart menuprogramsstartup8gfg.exe", nBufferLength=0x104, lpBuffer=0x3de0f0, lpFilePart=0x3de0d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roamingroamingmicrosoftwindowsstart menuprogramsstartup8gfg.exe", lpFilePart=0x3de0d8*="Roamingroamingmicrosoftwindowsstart menuprogramsstartup8gfg.exe") returned 0x8b [0129.592] SetErrorMode (uMode=0x0) returned 0x1 [0129.592] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\c:\\users\\5p5nrgjn0js halpmcxz\\appdata")) returned 0xffffffff [0129.593] GetLastError () returned 0x7b [0129.593] _get_osfhandle (_FileHandle=2) returned 0xb [0129.593] GetFileType (hFile=0xb) returned 0x2 [0129.593] GetStdHandle (nStdHandle=0xfffffff4) returned 0xb [0129.593] GetConsoleMode (in: hConsoleHandle=0xb, lpMode=0x3de280 | out: lpMode=0x3de280) returned 1 [0129.594] _get_osfhandle (_FileHandle=2) returned 0xb [0129.594] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xb, lpConsoleScreenBufferInfo=0x3de2b4 | out: lpConsoleScreenBufferInfo=0x3de2b4) returned 1 [0129.594] FormatMessageW (in: dwFlags=0x1a00, lpSource=0x0, dwMessageId=0x7b, dwLanguageId=0x0, lpBuffer=0x49fb4640, nSize=0x2000, Arguments=0x0 | out: lpBuffer="The filename, directory name, or volume label syntax is incorrect.\r\n") returned 0x44 [0129.712] FormatMessageW (in: dwFlags=0x1800, lpSource=0x0, dwMessageId=0x7b, dwLanguageId=0x0, lpBuffer=0x49fb4640, nSize=0x2000, Arguments=0x3de2f4 | out: lpBuffer="The filename, directory name, or volume label syntax is incorrect.\r\n") returned 0x44 [0129.713] WriteConsoleW (in: hConsoleOutput=0xb, lpBuffer=0x49fb4640*, nNumberOfCharsToWrite=0x44, lpNumberOfCharsWritten=0x3de2d8, lpReserved=0x0 | out: lpBuffer=0x49fb4640*, lpNumberOfCharsWritten=0x3de2d8*=0x44) returned 1 [0129.714] _get_osfhandle (_FileHandle=1) returned 0x7 [0129.714] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0129.715] _get_osfhandle (_FileHandle=1) returned 0x7 [0129.715] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x49fa41ac | out: lpMode=0x49fa41ac) returned 1 [0129.715] _get_osfhandle (_FileHandle=0) returned 0x3 [0129.715] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x49fa41b0 | out: lpMode=0x49fa41b0) returned 1 [0129.715] SetConsoleInputExeNameW () returned 0x1 [0129.715] GetConsoleOutputCP () returned 0x1b5 [0129.715] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x49fa4260 | out: lpCPInfo=0x49fa4260) returned 1 [0129.715] SetThreadUILanguage (LangId=0x0) returned 0x409 [0129.715] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\1296.tmp.bat" (normalized: "c:\\users\\5p5nrg~1\\appdata\\local\\temp\\1296.tmp.bat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x3df08c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x74 [0129.716] _open_osfhandle (_OSFileHandle=0x74, _Flags=8) returned 3 [0129.716] _get_osfhandle (_FileHandle=3) returned 0x74 [0129.716] SetFilePointer (in: hFile=0x74, lDistanceToMove=126, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7e [0129.716] _get_osfhandle (_FileHandle=3) returned 0x74 [0129.716] SetFilePointer (in: hFile=0x74, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x7e [0129.716] ReadFile (in: hFile=0x74, lpBuffer=0x49fa6640, nNumberOfBytesToRead=0x1fff, lpNumberOfBytesRead=0x3df070, lpOverlapped=0x0 | out: lpBuffer=0x49fa6640*, lpNumberOfBytesRead=0x3df070*=0xb7, lpOverlapped=0x0) returned 1 [0129.716] SetFilePointer (in: hFile=0x74, lDistanceToMove=249, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf9 [0129.716] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x49fa6640, cbMultiByte=123, lpWideCharStr=0x49fac640, cchWideChar=8191 | out: lpWideCharStr="if exist \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\%APPDATA%roamingmicrosoftwindowsstart menuprogramsstartup8gfg.exe\" goto d\r\n") returned 123 [0129.716] _get_osfhandle (_FileHandle=3) returned 0x74 [0129.716] GetFileType (hFile=0x74) returned 0x1 [0129.716] _get_osfhandle (_FileHandle=3) returned 0x74 [0129.716] SetFilePointer (in: hFile=0x74, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0xf9 [0129.717] GetEnvironmentVariableW (in: lpName="APPDATA", lpBuffer=0x49fb0640, nSize=0x2000 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x2d [0129.717] _wcsicmp (_String1="exist", _String2="/I") returned 54 [0129.717] _wcsicmp (_String1="ERRORLEVEL", _String2="exist") returned -6 [0129.717] _wcsicmp (_String1="EXIST", _String2="exist") returned 0 [0129.719] _tell (_FileHandle=3) returned 249 [0129.719] _close (_FileHandle=3) returned 0 [0129.719] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roamingroamingmicrosoftwindowsstart menuprogramsstartup8gfg.exe", nBufferLength=0x208, lpBuffer=0x3dec4c, lpFilePart=0x3de9f8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roamingroamingmicrosoftwindowsstart menuprogramsstartup8gfg.exe", lpFilePart=0x3de9f8*="Roamingroamingmicrosoftwindowsstart menuprogramsstartup8gfg.exe") returned 0x8b [0129.719] wcsncmp (_String1="C:\\U", _String2="\\\\.\\", _MaxCount=0x4) returned -25 [0129.719] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roamingroamingmicrosoftwindowsstart menuprogramsstartup8gfg.exe", fInfoLevelId=0x1, lpFindFileData=0x3de9fc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x3de9fc) returned 0xffffffff [0129.719] GetLastError () returned 0x7b [0129.719] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0129.719] GetLastError () returned 0x6 [0129.719] _get_osfhandle (_FileHandle=1) returned 0x7 [0129.719] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0129.720] _get_osfhandle (_FileHandle=1) returned 0x7 [0129.720] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x49fa41ac | out: lpMode=0x49fa41ac) returned 1 [0129.720] _get_osfhandle (_FileHandle=0) returned 0x3 [0129.720] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x49fa41b0 | out: lpMode=0x49fa41b0) returned 1 [0129.720] SetConsoleInputExeNameW () returned 0x1 [0129.720] GetConsoleOutputCP () returned 0x1b5 [0129.721] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x49fa4260 | out: lpCPInfo=0x49fa4260) returned 1 [0129.721] SetThreadUILanguage (LangId=0x0) returned 0x409 [0129.721] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\1296.tmp.bat" (normalized: "c:\\users\\5p5nrg~1\\appdata\\local\\temp\\1296.tmp.bat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x3df08c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x74 [0129.721] _open_osfhandle (_OSFileHandle=0x74, _Flags=8) returned 3 [0129.721] _get_osfhandle (_FileHandle=3) returned 0x74 [0129.721] SetFilePointer (in: hFile=0x74, lDistanceToMove=249, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf9 [0129.722] _get_osfhandle (_FileHandle=3) returned 0x74 [0129.722] SetFilePointer (in: hFile=0x74, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0xf9 [0129.722] ReadFile (in: hFile=0x74, lpBuffer=0x49fa6640, nNumberOfBytesToRead=0x1fff, lpNumberOfBytesRead=0x3df070, lpOverlapped=0x0 | out: lpBuffer=0x49fa6640*, lpNumberOfBytesRead=0x3df070*=0x3c, lpOverlapped=0x0) returned 1 [0129.722] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x49fa6640, cbMultiByte=60, lpWideCharStr=0x49fac640, cchWideChar=8191 | out: lpWideCharStr="del /F \"C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\1296.tmp.bat\"\r\nmingmicrosoftwindowsstart menuprogramsstartup8gfg.exe\" goto d\r\n") returned 60 [0129.722] _get_osfhandle (_FileHandle=3) returned 0x74 [0129.722] GetFileType (hFile=0x74) returned 0x1 [0129.722] _get_osfhandle (_FileHandle=3) returned 0x74 [0129.722] SetFilePointer (in: hFile=0x74, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x135 [0129.723] _tell (_FileHandle=3) returned 309 [0129.723] _close (_FileHandle=3) returned 0 [0129.723] _wcsicmp (_String1="del", _String2="DIR") returned -4 [0129.723] _wcsicmp (_String1="del", _String2="ERASE") returned -1 [0129.723] _wcsicmp (_String1="del", _String2="DEL") returned 0 [0129.723] GetConsoleTitleW (in: lpConsoleTitle=0x3dec54, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0129.724] GetCurrentDirectoryW (in: nBufferLength=0x106, lpBuffer=0x3dea0c | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0129.724] GetCurrentDirectoryW (in: nBufferLength=0x106, lpBuffer=0x3dda9c | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0129.724] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x0, lpVolumeSerialNumber=0x0, lpMaximumComponentLength=0x3ddccc, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x3ddcd0, nFileSystemNameSize=0x106 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x0, lpMaximumComponentLength=0x3ddccc*=0xff, lpFileSystemFlags=0x0, lpFileSystemNameBuffer="NTFS") returned 1 [0129.740] _wcsicmp (_String1="NTFS", _String2="FAT") returned 8 [0129.740] _wcsicmp (_String1="1296.tmp.bat", _String2=".") returned 3 [0129.740] _wcsicmp (_String1="1296.tmp.bat", _String2="..") returned 3 [0129.740] GetFileAttributesW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\1296.tmp.bat" (normalized: "c:\\users\\5p5nrg~1\\appdata\\local\\temp\\1296.tmp.bat")) returned 0x2020 [0129.740] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4b43e0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0129.740] GetFullPathNameW (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\1296.tmp.bat", nBufferLength=0x104, lpBuffer=0x3de0f0, lpFilePart=0x3de0d8 | out: lpBuffer="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\1296.tmp.bat", lpFilePart=0x3de0d8*="1296.tmp.bat") returned 0x31 [0129.740] SetErrorMode (uMode=0x0) returned 0x1 [0129.741] GetFileAttributesW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp" (normalized: "c:\\users\\5p5nrg~1\\appdata\\local\\temp")) returned 0x2010 [0129.741] _wcsicmp (_String1="1296.tmp.bat", _String2=".") returned 3 [0129.741] _wcsicmp (_String1="1296.tmp.bat", _String2="..") returned 3 [0129.741] GetFileAttributesW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\1296.tmp.bat" (normalized: "c:\\users\\5p5nrg~1\\appdata\\local\\temp\\1296.tmp.bat")) returned 0x2020 [0129.741] FindFirstFileExW (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\1296.tmp.bat", fInfoLevelId=0x0, lpFindFileData=0x4b491c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x4b491c) returned 0x4b5120 [0129.741] DeleteFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\1296.tmp.bat" (normalized: "c:\\users\\5p5nrg~1\\appdata\\local\\temp\\1296.tmp.bat")) returned 1 [0129.742] FindNextFileW (in: hFindFile=0x4b5120, lpFindFileData=0x4b491c | out: lpFindFileData=0x4b491c) returned 0 [0129.743] GetLastError () returned 0x12 [0129.743] FindClose (in: hFindFile=0x4b5120 | out: hFindFile=0x4b5120) returned 1 [0129.744] _get_osfhandle (_FileHandle=1) returned 0x7 [0129.744] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0129.744] _get_osfhandle (_FileHandle=1) returned 0x7 [0129.744] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x49fa41ac | out: lpMode=0x49fa41ac) returned 1 [0129.744] _get_osfhandle (_FileHandle=0) returned 0x3 [0129.744] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x49fa41b0 | out: lpMode=0x49fa41b0) returned 1 [0129.744] SetConsoleInputExeNameW () returned 0x1 [0129.744] GetConsoleOutputCP () returned 0x1b5 [0129.745] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x49fa4260 | out: lpCPInfo=0x49fa4260) returned 1 [0129.745] SetThreadUILanguage (LangId=0x0) returned 0x409 [0129.745] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\1296.tmp.bat" (normalized: "c:\\users\\5p5nrg~1\\appdata\\local\\temp\\1296.tmp.bat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x3df08c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.745] GetLastError () returned 0x2 [0129.745] _get_osfhandle (_FileHandle=2) returned 0xb [0129.745] GetFileType (hFile=0xb) returned 0x2 [0129.745] GetStdHandle (nStdHandle=0xfffffff4) returned 0xb [0129.745] GetConsoleMode (in: hConsoleHandle=0xb, lpMode=0x3df044 | out: lpMode=0x3df044) returned 1 [0129.746] _get_osfhandle (_FileHandle=2) returned 0xb [0129.746] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xb, lpConsoleScreenBufferInfo=0x3df078 | out: lpConsoleScreenBufferInfo=0x3df078) returned 1 [0129.746] FormatMessageW (in: dwFlags=0x1a00, lpSource=0x0, dwMessageId=0x236c, dwLanguageId=0x0, lpBuffer=0x49fb4640, nSize=0x2000, Arguments=0x0 | out: lpBuffer="The batch file cannot be found.\r\n") returned 0x21 [0129.746] FormatMessageW (in: dwFlags=0x1800, lpSource=0x0, dwMessageId=0x236c, dwLanguageId=0x0, lpBuffer=0x49fb4640, nSize=0x2000, Arguments=0x3df0b8 | out: lpBuffer="The batch file cannot be found.\r\n") returned 0x21 [0129.746] WriteConsoleW (in: hConsoleOutput=0xb, lpBuffer=0x49fb4640*, nNumberOfCharsToWrite=0x21, lpNumberOfCharsWritten=0x3df09c, lpReserved=0x0 | out: lpBuffer=0x49fb4640*, lpNumberOfCharsWritten=0x3df09c*=0x21) returned 1 [0129.746] CmdBatNotification () returned 0x1 [0129.746] _get_osfhandle (_FileHandle=1) returned 0x7 [0129.746] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0129.747] _get_osfhandle (_FileHandle=1) returned 0x7 [0129.747] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x49fa41ac | out: lpMode=0x49fa41ac) returned 1 [0129.747] _get_osfhandle (_FileHandle=0) returned 0x3 [0129.747] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x49fa41b0 | out: lpMode=0x49fa41b0) returned 1 [0129.747] SetConsoleInputExeNameW () returned 0x1 [0129.747] GetConsoleOutputCP () returned 0x1b5 [0129.747] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x49fa4260 | out: lpCPInfo=0x49fa4260) returned 1 [0129.747] SetThreadUILanguage (LangId=0x0) returned 0x409 [0129.747] exit (_Code=1) Process: id = "4" image_name = "vssadmin.exe" filename = "c:\\windows\\system32\\vssadmin.exe" page_root = "0x3c963000" os_pid = "0xae4" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "2" os_parent_pid = "0xac8" cmd_line = " delete shadows /all /quiet" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000ea88" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 379 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 380 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 381 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 382 start_va = 0x1d0000 end_va = 0x24ffff entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 383 start_va = 0x77670000 end_va = 0x77818fff entry_point = 0x77670000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 384 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 385 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 386 start_va = 0x7fff6000 end_va = 0x7fff6fff entry_point = 0x0 region_type = private name = "private_0x000000007fff6000" filename = "" Region: id = 387 start_va = 0xff940000 end_va = 0xff96cfff entry_point = 0xff940000 region_type = mapped_file name = "vssadmin.exe" filename = "\\Windows\\System32\\vssadmin.exe" (normalized: "c:\\windows\\system32\\vssadmin.exe") Region: id = 388 start_va = 0x7feff990000 end_va = 0x7feff990fff entry_point = 0x7feff990000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 389 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 390 start_va = 0x7fffffdb000 end_va = 0x7fffffdbfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdb000" filename = "" Region: id = 391 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 433 start_va = 0x3e0000 end_va = 0x4dffff entry_point = 0x0 region_type = private name = "private_0x00000000003e0000" filename = "" Region: id = 434 start_va = 0x77550000 end_va = 0x7766efff entry_point = 0x77550000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 435 start_va = 0x7fefd920000 end_va = 0x7fefd98afff entry_point = 0x7fefd920000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 484 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 485 start_va = 0x20000 end_va = 0x2ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 486 start_va = 0x50000 end_va = 0xb6fff entry_point = 0x50000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 487 start_va = 0x77450000 end_va = 0x77549fff entry_point = 0x77450000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 488 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 489 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 490 start_va = 0x7fef79b0000 end_va = 0x7fef79c6fff entry_point = 0x7fef79b0000 region_type = mapped_file name = "vsstrace.dll" filename = "\\Windows\\System32\\vsstrace.dll" (normalized: "c:\\windows\\system32\\vsstrace.dll") Region: id = 491 start_va = 0x7fef79d0000 end_va = 0x7fef7b7ffff entry_point = 0x7fef79d0000 region_type = mapped_file name = "vssapi.dll" filename = "\\Windows\\System32\\vssapi.dll" (normalized: "c:\\windows\\system32\\vssapi.dll") Region: id = 492 start_va = 0x7fefb070000 end_va = 0x7fefb088fff entry_point = 0x7fefb070000 region_type = mapped_file name = "atl.dll" filename = "\\Windows\\System32\\atl.dll" (normalized: "c:\\windows\\system32\\atl.dll") Region: id = 493 start_va = 0x7fefdb10000 end_va = 0x7fefdbaefff entry_point = 0x7fefdb10000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 494 start_va = 0x7fefdbb0000 end_va = 0x7fefdc86fff entry_point = 0x7fefdbb0000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 495 start_va = 0x7fefdc90000 end_va = 0x7fefdcf6fff entry_point = 0x7fefdc90000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 496 start_va = 0x7fefdd00000 end_va = 0x7fefddc8fff entry_point = 0x7fefdd00000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 497 start_va = 0x7fefddf0000 end_va = 0x7fefdff2fff entry_point = 0x7fefddf0000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 498 start_va = 0x7fefe330000 end_va = 0x7fefe34efff entry_point = 0x7fefe330000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 499 start_va = 0x7fefe350000 end_va = 0x7fefe35dfff entry_point = 0x7fefe350000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 500 start_va = 0x7feff740000 end_va = 0x7feff81afff entry_point = 0x7feff740000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 501 start_va = 0x7feff820000 end_va = 0x7feff94cfff entry_point = 0x7feff820000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 502 start_va = 0x140000 end_va = 0x14ffff entry_point = 0x0 region_type = private name = "private_0x0000000000140000" filename = "" Region: id = 503 start_va = 0x250000 end_va = 0x34ffff entry_point = 0x0 region_type = private name = "private_0x0000000000250000" filename = "" Region: id = 504 start_va = 0x4e0000 end_va = 0x667fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000004e0000" filename = "" Region: id = 505 start_va = 0x7fefe0a0000 end_va = 0x7fefe1a8fff entry_point = 0x7fefe0a0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 506 start_va = 0x7feff950000 end_va = 0x7feff97dfff entry_point = 0x7feff950000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 508 start_va = 0xc0000 end_va = 0xc6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000c0000" filename = "" Region: id = 509 start_va = 0xd0000 end_va = 0xd1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000d0000" filename = "" Region: id = 510 start_va = 0xe0000 end_va = 0xecfff entry_point = 0xe0000 region_type = mapped_file name = "vssadmin.exe.mui" filename = "\\Windows\\System32\\en-US\\vssadmin.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\vssadmin.exe.mui") Region: id = 511 start_va = 0xf0000 end_va = 0xf0fff entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 512 start_va = 0x100000 end_va = 0x100fff entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 513 start_va = 0x670000 end_va = 0x7f0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000670000" filename = "" Region: id = 514 start_va = 0x800000 end_va = 0x1bfffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000800000" filename = "" Region: id = 515 start_va = 0x7fefd4b0000 end_va = 0x7fefd4befff entry_point = 0x7fefd4b0000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 516 start_va = 0x110000 end_va = 0x110fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 517 start_va = 0x1cd0000 end_va = 0x1d4ffff entry_point = 0x0 region_type = private name = "private_0x0000000001cd0000" filename = "" Region: id = 518 start_va = 0x7fefe000000 end_va = 0x7fefe098fff entry_point = 0x7fefe000000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 519 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 520 start_va = 0x120000 end_va = 0x120fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 521 start_va = 0x1e40000 end_va = 0x1ebffff entry_point = 0x0 region_type = private name = "private_0x0000000001e40000" filename = "" Region: id = 522 start_va = 0x7fefceb0000 end_va = 0x7fefcec6fff entry_point = 0x7fefceb0000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 523 start_va = 0x7fffffd9000 end_va = 0x7fffffdafff entry_point = 0x0 region_type = private name = "private_0x000007fffffd9000" filename = "" Region: id = 524 start_va = 0x7fefcbb0000 end_va = 0x7fefcbf6fff entry_point = 0x7fefcbb0000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 525 start_va = 0x1ec0000 end_va = 0x218efff entry_point = 0x1ec0000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 526 start_va = 0x7fefd5a0000 end_va = 0x7fefd5b3fff entry_point = 0x7fefd5a0000 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 527 start_va = 0x1c30000 end_va = 0x1caffff entry_point = 0x0 region_type = private name = "private_0x0000000001c30000" filename = "" Region: id = 528 start_va = 0x21e0000 end_va = 0x225ffff entry_point = 0x0 region_type = private name = "private_0x00000000021e0000" filename = "" Region: id = 529 start_va = 0x7fef3e60000 end_va = 0x7fef3e73fff entry_point = 0x7fef3e60000 region_type = mapped_file name = "vss_ps.dll" filename = "\\Windows\\System32\\vss_ps.dll" (normalized: "c:\\windows\\system32\\vss_ps.dll") Region: id = 530 start_va = 0x7fffffd5000 end_va = 0x7fffffd6fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd5000" filename = "" Region: id = 531 start_va = 0x7fffffd7000 end_va = 0x7fffffd8fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd7000" filename = "" Thread: id = 8 os_tid = 0xae8 Thread: id = 11 os_tid = 0xb24 Thread: id = 12 os_tid = 0xb28 Thread: id = 13 os_tid = 0xb2c Thread: id = 14 os_tid = 0xb30 Process: id = "5" image_name = "vssvc.exe" filename = "c:\\windows\\system32\\vssvc.exe" page_root = "0x397bf000" os_pid = "0xb34" os_integrity_level = "0x4000" os_privileges = "0xe60b7e890" monitor_reason = "rpc_server" parent_id = "4" os_parent_pid = "0xae4" cmd_line = "C:\\Windows\\system32\\vssvc.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\VSS" [0xe], "NT AUTHORITY\\Logon Session 00000000:0004c5d8" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Region: id = 532 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 533 start_va = 0x20000 end_va = 0x26fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 534 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 535 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 536 start_va = 0x50000 end_va = 0xcffff entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 537 start_va = 0xd0000 end_va = 0x136fff entry_point = 0xd0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 538 start_va = 0x140000 end_va = 0x141fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 539 start_va = 0x150000 end_va = 0x160fff entry_point = 0x150000 region_type = mapped_file name = "vssvc.exe.mui" filename = "\\Windows\\System32\\en-US\\VSSVC.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\vssvc.exe.mui") Region: id = 540 start_va = 0x170000 end_va = 0x170fff entry_point = 0x0 region_type = private name = "private_0x0000000000170000" filename = "" Region: id = 541 start_va = 0x180000 end_va = 0x180fff entry_point = 0x0 region_type = private name = "private_0x0000000000180000" filename = "" Region: id = 542 start_va = 0x190000 end_va = 0x190fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 543 start_va = 0x1b0000 end_va = 0x1bffff entry_point = 0x0 region_type = private name = "private_0x00000000001b0000" filename = "" Region: id = 544 start_va = 0x1c0000 end_va = 0x23ffff entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 545 start_va = 0x260000 end_va = 0x35ffff entry_point = 0x0 region_type = private name = "private_0x0000000000260000" filename = "" Region: id = 546 start_va = 0x360000 end_va = 0x45ffff entry_point = 0x0 region_type = private name = "private_0x0000000000360000" filename = "" Region: id = 547 start_va = 0x460000 end_va = 0x5e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 548 start_va = 0x5f0000 end_va = 0x770fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005f0000" filename = "" Region: id = 549 start_va = 0x780000 end_va = 0x83ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000780000" filename = "" Region: id = 550 start_va = 0x840000 end_va = 0xc32fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000840000" filename = "" Region: id = 551 start_va = 0xcd0000 end_va = 0xd4ffff entry_point = 0x0 region_type = private name = "private_0x0000000000cd0000" filename = "" Region: id = 552 start_va = 0xd90000 end_va = 0xe0ffff entry_point = 0x0 region_type = private name = "private_0x0000000000d90000" filename = "" Region: id = 553 start_va = 0xea0000 end_va = 0xf1ffff entry_point = 0x0 region_type = private name = "private_0x0000000000ea0000" filename = "" Region: id = 554 start_va = 0xf20000 end_va = 0x11eefff entry_point = 0xf20000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 555 start_va = 0x1270000 end_va = 0x12effff entry_point = 0x0 region_type = private name = "private_0x0000000001270000" filename = "" Region: id = 556 start_va = 0x1440000 end_va = 0x14bffff entry_point = 0x0 region_type = private name = "private_0x0000000001440000" filename = "" Region: id = 557 start_va = 0x77450000 end_va = 0x77549fff entry_point = 0x77450000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 558 start_va = 0x77550000 end_va = 0x7766efff entry_point = 0x77550000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 559 start_va = 0x77670000 end_va = 0x77818fff entry_point = 0x77670000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 560 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 561 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 562 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 563 start_va = 0xff670000 end_va = 0xff7fafff entry_point = 0xff670000 region_type = mapped_file name = "vssvc.exe" filename = "\\Windows\\System32\\VSSVC.exe" (normalized: "c:\\windows\\system32\\vssvc.exe") Region: id = 564 start_va = 0x7fef36f0000 end_va = 0x7fef3703fff entry_point = 0x7fef36f0000 region_type = mapped_file name = "xolehlp.dll" filename = "\\Windows\\System32\\xolehlp.dll" (normalized: "c:\\windows\\system32\\xolehlp.dll") Region: id = 565 start_va = 0x7fef3e60000 end_va = 0x7fef3e73fff entry_point = 0x7fef3e60000 region_type = mapped_file name = "vss_ps.dll" filename = "\\Windows\\System32\\vss_ps.dll" (normalized: "c:\\windows\\system32\\vss_ps.dll") Region: id = 566 start_va = 0x7fef3e80000 end_va = 0x7fef3e89fff entry_point = 0x7fef3e80000 region_type = mapped_file name = "virtdisk.dll" filename = "\\Windows\\System32\\virtdisk.dll" (normalized: "c:\\windows\\system32\\virtdisk.dll") Region: id = 567 start_va = 0x7fef3f20000 end_va = 0x7fef3f28fff entry_point = 0x7fef3f20000 region_type = mapped_file name = "fltlib.dll" filename = "\\Windows\\System32\\fltLib.dll" (normalized: "c:\\windows\\system32\\fltlib.dll") Region: id = 568 start_va = 0x7fef79b0000 end_va = 0x7fef79c6fff entry_point = 0x7fef79b0000 region_type = mapped_file name = "vsstrace.dll" filename = "\\Windows\\System32\\vsstrace.dll" (normalized: "c:\\windows\\system32\\vsstrace.dll") Region: id = 569 start_va = 0x7fef79d0000 end_va = 0x7fef7b7ffff entry_point = 0x7fef79d0000 region_type = mapped_file name = "vssapi.dll" filename = "\\Windows\\System32\\vssapi.dll" (normalized: "c:\\windows\\system32\\vssapi.dll") Region: id = 570 start_va = 0x7fefb070000 end_va = 0x7fefb088fff entry_point = 0x7fefb070000 region_type = mapped_file name = "atl.dll" filename = "\\Windows\\System32\\atl.dll" (normalized: "c:\\windows\\system32\\atl.dll") Region: id = 571 start_va = 0x7fefb7c0000 end_va = 0x7fefb7d3fff entry_point = 0x7fefb7c0000 region_type = mapped_file name = "samcli.dll" filename = "\\Windows\\System32\\samcli.dll" (normalized: "c:\\windows\\system32\\samcli.dll") Region: id = 572 start_va = 0x7fefb7e0000 end_va = 0x7fefb7f4fff entry_point = 0x7fefb7e0000 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll") Region: id = 573 start_va = 0x7fefb800000 end_va = 0x7fefb80bfff entry_point = 0x7fefb800000 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll") Region: id = 574 start_va = 0x7fefb810000 end_va = 0x7fefb825fff entry_point = 0x7fefb810000 region_type = mapped_file name = "netapi32.dll" filename = "\\Windows\\System32\\netapi32.dll" (normalized: "c:\\windows\\system32\\netapi32.dll") Region: id = 575 start_va = 0x7fefb850000 end_va = 0x7fefb868fff entry_point = 0x7fefb850000 region_type = mapped_file name = "resutils.dll" filename = "\\Windows\\System32\\resutils.dll" (normalized: "c:\\windows\\system32\\resutils.dll") Region: id = 576 start_va = 0x7fefb870000 end_va = 0x7fefb8bffff entry_point = 0x7fefb870000 region_type = mapped_file name = "clusapi.dll" filename = "\\Windows\\System32\\clusapi.dll" (normalized: "c:\\windows\\system32\\clusapi.dll") Region: id = 577 start_va = 0x7fefc780000 end_va = 0x7fefc78bfff entry_point = 0x7fefc780000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 578 start_va = 0x7fefcbb0000 end_va = 0x7fefcbf6fff entry_point = 0x7fefcbb0000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 579 start_va = 0x7fefceb0000 end_va = 0x7fefcec6fff entry_point = 0x7fefceb0000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 580 start_va = 0x7fefd0a0000 end_va = 0x7fefd0cefff entry_point = 0x7fefd0a0000 region_type = mapped_file name = "authz.dll" filename = "\\Windows\\System32\\authz.dll" (normalized: "c:\\windows\\system32\\authz.dll") Region: id = 581 start_va = 0x7fefd150000 end_va = 0x7fefd163fff entry_point = 0x7fefd150000 region_type = mapped_file name = "cryptdll.dll" filename = "\\Windows\\System32\\cryptdll.dll" (normalized: "c:\\windows\\system32\\cryptdll.dll") Region: id = 582 start_va = 0x7fefd3b0000 end_va = 0x7fefd3d2fff entry_point = 0x7fefd3b0000 region_type = mapped_file name = "srvcli.dll" filename = "\\Windows\\System32\\srvcli.dll" (normalized: "c:\\windows\\system32\\srvcli.dll") Region: id = 583 start_va = 0x7fefd4b0000 end_va = 0x7fefd4befff entry_point = 0x7fefd4b0000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 584 start_va = 0x7fefd5a0000 end_va = 0x7fefd5b3fff entry_point = 0x7fefd5a0000 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 585 start_va = 0x7fefd670000 end_va = 0x7fefd6a5fff entry_point = 0x7fefd670000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 586 start_va = 0x7fefd900000 end_va = 0x7fefd919fff entry_point = 0x7fefd900000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 587 start_va = 0x7fefd920000 end_va = 0x7fefd98afff entry_point = 0x7fefd920000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 588 start_va = 0x7fefdb10000 end_va = 0x7fefdbaefff entry_point = 0x7fefdb10000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 589 start_va = 0x7fefdbb0000 end_va = 0x7fefdc86fff entry_point = 0x7fefdbb0000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 590 start_va = 0x7fefdc90000 end_va = 0x7fefdcf6fff entry_point = 0x7fefdc90000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 591 start_va = 0x7fefdd00000 end_va = 0x7fefddc8fff entry_point = 0x7fefdd00000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 592 start_va = 0x7fefddf0000 end_va = 0x7fefdff2fff entry_point = 0x7fefddf0000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 593 start_va = 0x7fefe000000 end_va = 0x7fefe098fff entry_point = 0x7fefe000000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 594 start_va = 0x7fefe0a0000 end_va = 0x7fefe1a8fff entry_point = 0x7fefe0a0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 595 start_va = 0x7fefe330000 end_va = 0x7fefe34efff entry_point = 0x7fefe330000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 596 start_va = 0x7fefe350000 end_va = 0x7fefe35dfff entry_point = 0x7fefe350000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 597 start_va = 0x7feff0f0000 end_va = 0x7feff2c6fff entry_point = 0x7feff0f0000 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll") Region: id = 598 start_va = 0x7feff2e0000 end_va = 0x7feff350fff entry_point = 0x7feff2e0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 599 start_va = 0x7feff740000 end_va = 0x7feff81afff entry_point = 0x7feff740000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 600 start_va = 0x7feff820000 end_va = 0x7feff94cfff entry_point = 0x7feff820000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 601 start_va = 0x7feff950000 end_va = 0x7feff97dfff entry_point = 0x7feff950000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 602 start_va = 0x7feff990000 end_va = 0x7feff990fff entry_point = 0x7feff990000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 603 start_va = 0x7fffffac000 end_va = 0x7fffffadfff entry_point = 0x0 region_type = private name = "private_0x000007fffffac000" filename = "" Region: id = 604 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 605 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 606 start_va = 0x7fffffd4000 end_va = 0x7fffffd5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd4000" filename = "" Region: id = 607 start_va = 0x7fffffd6000 end_va = 0x7fffffd6fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd6000" filename = "" Region: id = 608 start_va = 0x7fffffd8000 end_va = 0x7fffffd9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 609 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 610 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 611 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 612 start_va = 0x7fefc0a0000 end_va = 0x7fefc0bcfff entry_point = 0x7fefc0a0000 region_type = mapped_file name = "samlib.dll" filename = "\\Windows\\System32\\samlib.dll" (normalized: "c:\\windows\\system32\\samlib.dll") Region: id = 613 start_va = 0x1a0000 end_va = 0x1a0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 614 start_va = 0x7fefafd0000 end_va = 0x7fefb036fff entry_point = 0x7fefafd0000 region_type = mapped_file name = "es.dll" filename = "\\Windows\\System32\\es.dll" (normalized: "c:\\windows\\system32\\es.dll") Region: id = 748 start_va = 0x7fefbf70000 end_va = 0x7fefc09bfff entry_point = 0x7fefbf70000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 749 start_va = 0x7fef3540000 end_va = 0x7fef35c4fff entry_point = 0x7fef3540000 region_type = mapped_file name = "catsrvut.dll" filename = "\\Windows\\System32\\catsrvut.dll" (normalized: "c:\\windows\\system32\\catsrvut.dll") Region: id = 750 start_va = 0x7fef36e0000 end_va = 0x7fef36ebfff entry_point = 0x7fef36e0000 region_type = mapped_file name = "mfcsubs.dll" filename = "\\Windows\\System32\\mfcsubs.dll" (normalized: "c:\\windows\\system32\\mfcsubs.dll") Thread: id = 15 os_tid = 0xb48 Thread: id = 16 os_tid = 0xb44 Thread: id = 17 os_tid = 0xb40 Thread: id = 18 os_tid = 0xb3c Thread: id = 19 os_tid = 0xb38 Thread: id = 20 os_tid = 0xb4c Thread: id = 21 os_tid = 0xb50 Thread: id = 39 os_tid = 0xb74 Thread: id = 46 os_tid = 0x8ac Process: id = "6" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x9c04000" os_pid = "0x3fc" os_integrity_level = "0x4000" os_privileges = "0x60801000" monitor_reason = "rpc_server" parent_id = "5" os_parent_pid = "0xb34" cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalService" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EventSystem" [0xe], "NT SERVICE\\fdPHost" [0xa], "NT SERVICE\\lltdsvc" [0xa], "NT SERVICE\\netprofm" [0xa], "NT SERVICE\\nsi" [0xa], "NT SERVICE\\sppuinotify" [0xa], "NT SERVICE\\SstpSvc" [0xa], "NT SERVICE\\THREADORDER" [0xa], "NT SERVICE\\W32Time" [0xa], "NT SERVICE\\WdiServiceHost" [0xa], "NT SERVICE\\WebClient" [0xa], "NT SERVICE\\WinHttpAutoProxySvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000dd65" [0xc000000f], "LOCAL" [0x7] Region: id = 615 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 616 start_va = 0x20000 end_va = 0x26fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 617 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 618 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 619 start_va = 0x50000 end_va = 0xb6fff entry_point = 0x50000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 620 start_va = 0xc0000 end_va = 0xc1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000c0000" filename = "" Region: id = 621 start_va = 0xd0000 end_va = 0xd0fff entry_point = 0x0 region_type = private name = "private_0x00000000000d0000" filename = "" Region: id = 622 start_va = 0xe0000 end_va = 0xe0fff entry_point = 0x0 region_type = private name = "private_0x00000000000e0000" filename = "" Region: id = 623 start_va = 0xf0000 end_va = 0xf0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000f0000" filename = "" Region: id = 624 start_va = 0x110000 end_va = 0x18ffff entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 625 start_va = 0x190000 end_va = 0x190fff entry_point = 0x0 region_type = private name = "private_0x0000000000190000" filename = "" Region: id = 626 start_va = 0x230000 end_va = 0x32ffff entry_point = 0x0 region_type = private name = "private_0x0000000000230000" filename = "" Region: id = 627 start_va = 0x330000 end_va = 0x331fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000330000" filename = "" Region: id = 628 start_va = 0x340000 end_va = 0x34ffff entry_point = 0x0 region_type = private name = "private_0x0000000000340000" filename = "" Region: id = 629 start_va = 0x350000 end_va = 0x350fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000350000" filename = "" Region: id = 630 start_va = 0x3c0000 end_va = 0x3cffff entry_point = 0x0 region_type = private name = "private_0x00000000003c0000" filename = "" Region: id = 631 start_va = 0x3d0000 end_va = 0x3dffff entry_point = 0x0 region_type = private name = "private_0x00000000003d0000" filename = "" Region: id = 632 start_va = 0x3e0000 end_va = 0x4dffff entry_point = 0x0 region_type = private name = "private_0x00000000003e0000" filename = "" Region: id = 633 start_va = 0x4e0000 end_va = 0x667fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000004e0000" filename = "" Region: id = 634 start_va = 0x670000 end_va = 0x7f0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000670000" filename = "" Region: id = 635 start_va = 0x800000 end_va = 0x8bffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000800000" filename = "" Region: id = 636 start_va = 0x8c0000 end_va = 0xcb2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008c0000" filename = "" Region: id = 637 start_va = 0xce0000 end_va = 0xd5ffff entry_point = 0x0 region_type = private name = "private_0x0000000000ce0000" filename = "" Region: id = 638 start_va = 0xd60000 end_va = 0xe5ffff entry_point = 0x0 region_type = private name = "private_0x0000000000d60000" filename = "" Region: id = 639 start_va = 0xec0000 end_va = 0xf3ffff entry_point = 0x0 region_type = private name = "private_0x0000000000ec0000" filename = "" Region: id = 640 start_va = 0xf40000 end_va = 0x120efff entry_point = 0xf40000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 641 start_va = 0x1240000 end_va = 0x12bffff entry_point = 0x0 region_type = private name = "private_0x0000000001240000" filename = "" Region: id = 642 start_va = 0x12e0000 end_va = 0x135ffff entry_point = 0x0 region_type = private name = "private_0x00000000012e0000" filename = "" Region: id = 643 start_va = 0x13d0000 end_va = 0x144ffff entry_point = 0x0 region_type = private name = "private_0x00000000013d0000" filename = "" Region: id = 644 start_va = 0x15c0000 end_va = 0x16bffff entry_point = 0x0 region_type = private name = "private_0x00000000015c0000" filename = "" Region: id = 645 start_va = 0x16f0000 end_va = 0x176ffff entry_point = 0x0 region_type = private name = "private_0x00000000016f0000" filename = "" Region: id = 646 start_va = 0x1770000 end_va = 0x17effff entry_point = 0x0 region_type = private name = "private_0x0000000001770000" filename = "" Region: id = 647 start_va = 0x1830000 end_va = 0x18affff entry_point = 0x0 region_type = private name = "private_0x0000000001830000" filename = "" Region: id = 648 start_va = 0x18b0000 end_va = 0x18bffff entry_point = 0x0 region_type = private name = "private_0x00000000018b0000" filename = "" Region: id = 649 start_va = 0x1940000 end_va = 0x19bffff entry_point = 0x0 region_type = private name = "private_0x0000000001940000" filename = "" Region: id = 650 start_va = 0x1a70000 end_va = 0x1b6ffff entry_point = 0x0 region_type = private name = "private_0x0000000001a70000" filename = "" Region: id = 651 start_va = 0x1bb0000 end_va = 0x1c2ffff entry_point = 0x0 region_type = private name = "private_0x0000000001bb0000" filename = "" Region: id = 652 start_va = 0x1c40000 end_va = 0x1cbffff entry_point = 0x0 region_type = private name = "private_0x0000000001c40000" filename = "" Region: id = 653 start_va = 0x1ce0000 end_va = 0x1d5ffff entry_point = 0x0 region_type = private name = "private_0x0000000001ce0000" filename = "" Region: id = 654 start_va = 0x1d60000 end_va = 0x1e1ffff entry_point = 0x1d60000 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 655 start_va = 0x1ea0000 end_va = 0x1f1ffff entry_point = 0x0 region_type = private name = "private_0x0000000001ea0000" filename = "" Region: id = 656 start_va = 0x1fd0000 end_va = 0x204ffff entry_point = 0x0 region_type = private name = "private_0x0000000001fd0000" filename = "" Region: id = 657 start_va = 0x2050000 end_va = 0x224ffff entry_point = 0x0 region_type = private name = "private_0x0000000002050000" filename = "" Region: id = 658 start_va = 0x2330000 end_va = 0x23affff entry_point = 0x0 region_type = private name = "private_0x0000000002330000" filename = "" Region: id = 659 start_va = 0x24a0000 end_va = 0x251ffff entry_point = 0x0 region_type = private name = "private_0x00000000024a0000" filename = "" Region: id = 660 start_va = 0x2520000 end_va = 0x259ffff entry_point = 0x0 region_type = private name = "private_0x0000000002520000" filename = "" Region: id = 661 start_va = 0x25a0000 end_va = 0x261ffff entry_point = 0x0 region_type = private name = "private_0x00000000025a0000" filename = "" Region: id = 662 start_va = 0x73e50000 end_va = 0x73e52fff entry_point = 0x73e50000 region_type = mapped_file name = "sfc.dll" filename = "\\Windows\\System32\\sfc.dll" (normalized: "c:\\windows\\system32\\sfc.dll") Region: id = 663 start_va = 0x77450000 end_va = 0x77549fff entry_point = 0x77450000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 664 start_va = 0x77550000 end_va = 0x7766efff entry_point = 0x77550000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 665 start_va = 0x77670000 end_va = 0x77818fff entry_point = 0x77670000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 666 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 667 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 668 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 669 start_va = 0xff1c0000 end_va = 0xff1cafff entry_point = 0xff1c0000 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 670 start_va = 0x7fef69e0000 end_va = 0x7fef69f8fff entry_point = 0x7fef69e0000 region_type = mapped_file name = "pnrpnsp.dll" filename = "\\Windows\\System32\\pnrpnsp.dll" (normalized: "c:\\windows\\system32\\pnrpnsp.dll") Region: id = 671 start_va = 0x7fef6a00000 end_va = 0x7fef6a14fff entry_point = 0x7fef6a00000 region_type = mapped_file name = "napinsp.dll" filename = "\\Windows\\System32\\NapiNSP.dll" (normalized: "c:\\windows\\system32\\napinsp.dll") Region: id = 672 start_va = 0x7fef6a30000 end_va = 0x7fef6a3afff entry_point = 0x7fef6a30000 region_type = mapped_file name = "winrnr.dll" filename = "\\Windows\\System32\\winrnr.dll" (normalized: "c:\\windows\\system32\\winrnr.dll") Region: id = 673 start_va = 0x7fef7750000 end_va = 0x7fef7768fff entry_point = 0x7fef7750000 region_type = mapped_file name = "wdi.dll" filename = "\\Windows\\System32\\wdi.dll" (normalized: "c:\\windows\\system32\\wdi.dll") Region: id = 674 start_va = 0x7fef7770000 end_va = 0x7fef777ffff entry_point = 0x7fef7770000 region_type = mapped_file name = "sfc_os.dll" filename = "\\Windows\\System32\\sfc_os.dll" (normalized: "c:\\windows\\system32\\sfc_os.dll") Region: id = 675 start_va = 0x7fef7780000 end_va = 0x7fef7791fff entry_point = 0x7fef7780000 region_type = mapped_file name = "aepic.dll" filename = "\\Windows\\System32\\aepic.dll" (normalized: "c:\\windows\\system32\\aepic.dll") Region: id = 676 start_va = 0x7fef7800000 end_va = 0x7fef7863fff entry_point = 0x7fef7800000 region_type = mapped_file name = "webio.dll" filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll") Region: id = 677 start_va = 0x7fef7870000 end_va = 0x7fef78e0fff entry_point = 0x7fef7870000 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 678 start_va = 0x7fef8740000 end_va = 0x7fef87bbfff entry_point = 0x7fef8740000 region_type = mapped_file name = "wer.dll" filename = "\\Windows\\System32\\wer.dll" (normalized: "c:\\windows\\system32\\wer.dll") Region: id = 679 start_va = 0x7fef8ea0000 end_va = 0x7fef8eb7fff entry_point = 0x7fef8ea0000 region_type = mapped_file name = "vmictimeprovider.dll" filename = "\\Windows\\System32\\vmictimeprovider.dll" (normalized: "c:\\windows\\system32\\vmictimeprovider.dll") Region: id = 680 start_va = 0x7fef8ed0000 end_va = 0x7fef8f2ffff entry_point = 0x7fef8ed0000 region_type = mapped_file name = "w32time.dll" filename = "\\Windows\\System32\\w32time.dll" (normalized: "c:\\windows\\system32\\w32time.dll") Region: id = 681 start_va = 0x7fefada0000 end_va = 0x7fefadb7fff entry_point = 0x7fefada0000 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 682 start_va = 0x7fefadc0000 end_va = 0x7fefadd0fff entry_point = 0x7fefadc0000 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 683 start_va = 0x7fefadf0000 end_va = 0x7fefae42fff entry_point = 0x7fefadf0000 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 684 start_va = 0x7fefaf30000 end_va = 0x7fefaf39fff entry_point = 0x7fefaf30000 region_type = mapped_file name = "nsisvc.dll" filename = "\\Windows\\System32\\nsisvc.dll" (normalized: "c:\\windows\\system32\\nsisvc.dll") Region: id = 685 start_va = 0x7fefaf50000 end_va = 0x7fefaf5afff entry_point = 0x7fefaf50000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 686 start_va = 0x7fefaf60000 end_va = 0x7fefaf86fff entry_point = 0x7fefaf60000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 687 start_va = 0x7fefafd0000 end_va = 0x7fefb036fff entry_point = 0x7fefafd0000 region_type = mapped_file name = "es.dll" filename = "\\Windows\\System32\\es.dll" (normalized: "c:\\windows\\system32\\es.dll") Region: id = 688 start_va = 0x7fefb050000 end_va = 0x7fefb05bfff entry_point = 0x7fefb050000 region_type = mapped_file name = "dsrole.dll" filename = "\\Windows\\System32\\dsrole.dll" (normalized: "c:\\windows\\system32\\dsrole.dll") Region: id = 689 start_va = 0x7fefb0d0000 end_va = 0x7fefb0e4fff entry_point = 0x7fefb0d0000 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll") Region: id = 690 start_va = 0x7fefb590000 end_va = 0x7fefb667fff entry_point = 0x7fefb590000 region_type = mapped_file name = "perftrack.dll" filename = "\\Windows\\System32\\perftrack.dll" (normalized: "c:\\windows\\system32\\perftrack.dll") Region: id = 691 start_va = 0x7fefb700000 end_va = 0x7fefb70bfff entry_point = 0x7fefb700000 region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\System32\\npmproxy.dll" (normalized: "c:\\windows\\system32\\npmproxy.dll") Region: id = 692 start_va = 0x7fefb830000 end_va = 0x7fefb837fff entry_point = 0x7fefb830000 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll") Region: id = 693 start_va = 0x7fefb8c0000 end_va = 0x7fefb933fff entry_point = 0x7fefb8c0000 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll") Region: id = 694 start_va = 0x7fefbae0000 end_va = 0x7fefbaf7fff entry_point = 0x7fefbae0000 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 695 start_va = 0x7fefc780000 end_va = 0x7fefc78bfff entry_point = 0x7fefc780000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 696 start_va = 0x7fefc850000 end_va = 0x7fefc856fff entry_point = 0x7fefc850000 region_type = mapped_file name = "wshtcpip.dll" filename = "\\Windows\\System32\\WSHTCPIP.DLL" (normalized: "c:\\windows\\system32\\wshtcpip.dll") Region: id = 697 start_va = 0x7fefc940000 end_va = 0x7fefc95afff entry_point = 0x7fefc940000 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll") Region: id = 698 start_va = 0x7fefc960000 end_va = 0x7fefc97dfff entry_point = 0x7fefc960000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 699 start_va = 0x7fefcab0000 end_va = 0x7fefcab9fff entry_point = 0x7fefcab0000 region_type = mapped_file name = "credssp.dll" filename = "\\Windows\\System32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll") Region: id = 700 start_va = 0x7fefcbb0000 end_va = 0x7fefcbf6fff entry_point = 0x7fefcbb0000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 701 start_va = 0x7fefcca0000 end_va = 0x7fefcccffff entry_point = 0x7fefcca0000 region_type = mapped_file name = "logoncli.dll" filename = "\\Windows\\System32\\logoncli.dll" (normalized: "c:\\windows\\system32\\logoncli.dll") Region: id = 702 start_va = 0x7fefccd0000 end_va = 0x7fefcd2afff entry_point = 0x7fefccd0000 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 703 start_va = 0x7fefce40000 end_va = 0x7fefce46fff entry_point = 0x7fefce40000 region_type = mapped_file name = "wship6.dll" filename = "\\Windows\\System32\\wship6.dll" (normalized: "c:\\windows\\system32\\wship6.dll") Region: id = 704 start_va = 0x7fefce50000 end_va = 0x7fefcea4fff entry_point = 0x7fefce50000 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 705 start_va = 0x7fefceb0000 end_va = 0x7fefcec6fff entry_point = 0x7fefceb0000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 706 start_va = 0x7fefd150000 end_va = 0x7fefd163fff entry_point = 0x7fefd150000 region_type = mapped_file name = "cryptdll.dll" filename = "\\Windows\\System32\\cryptdll.dll" (normalized: "c:\\windows\\system32\\cryptdll.dll") Region: id = 707 start_va = 0x7fefd450000 end_va = 0x7fefd45afff entry_point = 0x7fefd450000 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 708 start_va = 0x7fefd480000 end_va = 0x7fefd4a4fff entry_point = 0x7fefd480000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 709 start_va = 0x7fefd4b0000 end_va = 0x7fefd4befff entry_point = 0x7fefd4b0000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 710 start_va = 0x7fefd4c0000 end_va = 0x7fefd550fff entry_point = 0x7fefd4c0000 region_type = mapped_file name = "sxs.dll" filename = "\\Windows\\System32\\sxs.dll" (normalized: "c:\\windows\\system32\\sxs.dll") Region: id = 711 start_va = 0x7fefd5a0000 end_va = 0x7fefd5b3fff entry_point = 0x7fefd5a0000 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 712 start_va = 0x7fefd5c0000 end_va = 0x7fefd5cefff entry_point = 0x7fefd5c0000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 713 start_va = 0x7fefd920000 end_va = 0x7fefd98afff entry_point = 0x7fefd920000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 714 start_va = 0x7fefdb10000 end_va = 0x7fefdbaefff entry_point = 0x7fefdb10000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 715 start_va = 0x7fefdbb0000 end_va = 0x7fefdc86fff entry_point = 0x7fefdbb0000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 716 start_va = 0x7fefdc90000 end_va = 0x7fefdcf6fff entry_point = 0x7fefdc90000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 717 start_va = 0x7fefdd00000 end_va = 0x7fefddc8fff entry_point = 0x7fefdd00000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 718 start_va = 0x7fefddf0000 end_va = 0x7fefdff2fff entry_point = 0x7fefddf0000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 719 start_va = 0x7fefe000000 end_va = 0x7fefe098fff entry_point = 0x7fefe000000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 720 start_va = 0x7fefe0a0000 end_va = 0x7fefe1a8fff entry_point = 0x7fefe0a0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 721 start_va = 0x7fefe330000 end_va = 0x7fefe34efff entry_point = 0x7fefe330000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 722 start_va = 0x7fefe350000 end_va = 0x7fefe35dfff entry_point = 0x7fefe350000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 723 start_va = 0x7feff2d0000 end_va = 0x7feff2d7fff entry_point = 0x7feff2d0000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 724 start_va = 0x7feff2e0000 end_va = 0x7feff350fff entry_point = 0x7feff2e0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 725 start_va = 0x7feff490000 end_va = 0x7feff4dcfff entry_point = 0x7feff490000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 726 start_va = 0x7feff740000 end_va = 0x7feff81afff entry_point = 0x7feff740000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 727 start_va = 0x7feff820000 end_va = 0x7feff94cfff entry_point = 0x7feff820000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 728 start_va = 0x7feff950000 end_va = 0x7feff97dfff entry_point = 0x7feff950000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 729 start_va = 0x7feff990000 end_va = 0x7feff990fff entry_point = 0x7feff990000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 730 start_va = 0x7fffff98000 end_va = 0x7fffff99fff entry_point = 0x0 region_type = private name = "private_0x000007fffff98000" filename = "" Region: id = 731 start_va = 0x7fffff9a000 end_va = 0x7fffff9bfff entry_point = 0x0 region_type = private name = "private_0x000007fffff9a000" filename = "" Region: id = 732 start_va = 0x7fffff9c000 end_va = 0x7fffff9dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff9c000" filename = "" Region: id = 733 start_va = 0x7fffff9e000 end_va = 0x7fffff9ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff9e000" filename = "" Region: id = 734 start_va = 0x7fffffa0000 end_va = 0x7fffffa1fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa0000" filename = "" Region: id = 735 start_va = 0x7fffffa4000 end_va = 0x7fffffa5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa4000" filename = "" Region: id = 736 start_va = 0x7fffffa6000 end_va = 0x7fffffa7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa6000" filename = "" Region: id = 737 start_va = 0x7fffffa8000 end_va = 0x7fffffa9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa8000" filename = "" Region: id = 738 start_va = 0x7fffffaa000 end_va = 0x7fffffabfff entry_point = 0x0 region_type = private name = "private_0x000007fffffaa000" filename = "" Region: id = 739 start_va = 0x7fffffac000 end_va = 0x7fffffadfff entry_point = 0x0 region_type = private name = "private_0x000007fffffac000" filename = "" Region: id = 740 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 741 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 742 start_va = 0x7fffffd3000 end_va = 0x7fffffd3fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 743 start_va = 0x7fffffd4000 end_va = 0x7fffffd5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd4000" filename = "" Region: id = 744 start_va = 0x7fffffd8000 end_va = 0x7fffffd9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 745 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 746 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 747 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Thread: id = 22 os_tid = 0x8f8 Thread: id = 23 os_tid = 0x884 Thread: id = 24 os_tid = 0x65c Thread: id = 25 os_tid = 0x690 Thread: id = 26 os_tid = 0x68c Thread: id = 27 os_tid = 0x674 Thread: id = 28 os_tid = 0x4f8 Thread: id = 29 os_tid = 0x75c Thread: id = 30 os_tid = 0x730 Thread: id = 31 os_tid = 0x72c Thread: id = 32 os_tid = 0x728 Thread: id = 33 os_tid = 0x158 Thread: id = 34 os_tid = 0x154 Thread: id = 35 os_tid = 0x128 Thread: id = 36 os_tid = 0x12c Thread: id = 37 os_tid = 0xc8 Thread: id = 38 os_tid = 0xb5c Process: id = "7" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x37dc5000" os_pid = "0xb54" os_integrity_level = "0x4000" os_privileges = "0x60814080" monitor_reason = "rpc_server" parent_id = "5" os_parent_pid = "0xb34" cmd_line = "C:\\Windows\\System32\\svchost.exe -k swprv" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\swprv" [0xe], "NT AUTHORITY\\Logon Session 00000000:0004cac9" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Region: id = 751 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 752 start_va = 0x20000 end_va = 0x26fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 753 start_va = 0x30000 end_va = 0xaffff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 754 start_va = 0xb0000 end_va = 0xb3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000b0000" filename = "" Region: id = 755 start_va = 0xc0000 end_va = 0xc0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000c0000" filename = "" Region: id = 756 start_va = 0xd0000 end_va = 0x136fff entry_point = 0xd0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 757 start_va = 0x140000 end_va = 0x141fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 758 start_va = 0x150000 end_va = 0x150fff entry_point = 0x0 region_type = private name = "private_0x0000000000150000" filename = "" Region: id = 759 start_va = 0x160000 end_va = 0x160fff entry_point = 0x0 region_type = private name = "private_0x0000000000160000" filename = "" Region: id = 760 start_va = 0x170000 end_va = 0x170fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000170000" filename = "" Region: id = 761 start_va = 0x1b0000 end_va = 0x2affff entry_point = 0x0 region_type = private name = "private_0x00000000001b0000" filename = "" Region: id = 762 start_va = 0x2b0000 end_va = 0x3affff entry_point = 0x0 region_type = private name = "private_0x00000000002b0000" filename = "" Region: id = 763 start_va = 0x420000 end_va = 0x42ffff entry_point = 0x0 region_type = private name = "private_0x0000000000420000" filename = "" Region: id = 764 start_va = 0x490000 end_va = 0x50ffff entry_point = 0x0 region_type = private name = "private_0x0000000000490000" filename = "" Region: id = 765 start_va = 0x590000 end_va = 0x60ffff entry_point = 0x0 region_type = private name = "private_0x0000000000590000" filename = "" Region: id = 766 start_va = 0x610000 end_va = 0x6cffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000610000" filename = "" Region: id = 767 start_va = 0x700000 end_va = 0x77ffff entry_point = 0x0 region_type = private name = "private_0x0000000000700000" filename = "" Region: id = 768 start_va = 0x780000 end_va = 0xa4efff entry_point = 0x780000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 769 start_va = 0xa50000 end_va = 0xbd7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a50000" filename = "" Region: id = 770 start_va = 0xbe0000 end_va = 0xd60fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000be0000" filename = "" Region: id = 771 start_va = 0xd70000 end_va = 0x1162fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000d70000" filename = "" Region: id = 772 start_va = 0x1220000 end_va = 0x129ffff entry_point = 0x0 region_type = private name = "private_0x0000000001220000" filename = "" Region: id = 773 start_va = 0x13f0000 end_va = 0x146ffff entry_point = 0x0 region_type = private name = "private_0x00000000013f0000" filename = "" Region: id = 774 start_va = 0x77450000 end_va = 0x77549fff entry_point = 0x77450000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 775 start_va = 0x77550000 end_va = 0x7766efff entry_point = 0x77550000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 776 start_va = 0x77670000 end_va = 0x77818fff entry_point = 0x77670000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 777 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 778 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 779 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 780 start_va = 0xff1c0000 end_va = 0xff1cafff entry_point = 0xff1c0000 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 781 start_va = 0x7fef35d0000 end_va = 0x7fef3651fff entry_point = 0x7fef35d0000 region_type = mapped_file name = "swprv.dll" filename = "\\Windows\\System32\\swprv.dll" (normalized: "c:\\windows\\system32\\swprv.dll") Region: id = 782 start_va = 0x7fef3e60000 end_va = 0x7fef3e73fff entry_point = 0x7fef3e60000 region_type = mapped_file name = "vss_ps.dll" filename = "\\Windows\\System32\\vss_ps.dll" (normalized: "c:\\windows\\system32\\vss_ps.dll") Region: id = 783 start_va = 0x7fef3e80000 end_va = 0x7fef3e89fff entry_point = 0x7fef3e80000 region_type = mapped_file name = "virtdisk.dll" filename = "\\Windows\\System32\\virtdisk.dll" (normalized: "c:\\windows\\system32\\virtdisk.dll") Region: id = 784 start_va = 0x7fef3f20000 end_va = 0x7fef3f28fff entry_point = 0x7fef3f20000 region_type = mapped_file name = "fltlib.dll" filename = "\\Windows\\System32\\fltLib.dll" (normalized: "c:\\windows\\system32\\fltlib.dll") Region: id = 785 start_va = 0x7fef79b0000 end_va = 0x7fef79c6fff entry_point = 0x7fef79b0000 region_type = mapped_file name = "vsstrace.dll" filename = "\\Windows\\System32\\vsstrace.dll" (normalized: "c:\\windows\\system32\\vsstrace.dll") Region: id = 786 start_va = 0x7fefb070000 end_va = 0x7fefb088fff entry_point = 0x7fefb070000 region_type = mapped_file name = "atl.dll" filename = "\\Windows\\System32\\atl.dll" (normalized: "c:\\windows\\system32\\atl.dll") Region: id = 787 start_va = 0x7fefcbb0000 end_va = 0x7fefcbf6fff entry_point = 0x7fefcbb0000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 788 start_va = 0x7fefceb0000 end_va = 0x7fefcec6fff entry_point = 0x7fefceb0000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 789 start_va = 0x7fefd4b0000 end_va = 0x7fefd4befff entry_point = 0x7fefd4b0000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 790 start_va = 0x7fefd5a0000 end_va = 0x7fefd5b3fff entry_point = 0x7fefd5a0000 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 791 start_va = 0x7fefd920000 end_va = 0x7fefd98afff entry_point = 0x7fefd920000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 792 start_va = 0x7fefdb10000 end_va = 0x7fefdbaefff entry_point = 0x7fefdb10000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 793 start_va = 0x7fefdbb0000 end_va = 0x7fefdc86fff entry_point = 0x7fefdbb0000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 794 start_va = 0x7fefdc90000 end_va = 0x7fefdcf6fff entry_point = 0x7fefdc90000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 795 start_va = 0x7fefdd00000 end_va = 0x7fefddc8fff entry_point = 0x7fefdd00000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 796 start_va = 0x7fefddf0000 end_va = 0x7fefdff2fff entry_point = 0x7fefddf0000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 797 start_va = 0x7fefe000000 end_va = 0x7fefe098fff entry_point = 0x7fefe000000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 798 start_va = 0x7fefe0a0000 end_va = 0x7fefe1a8fff entry_point = 0x7fefe0a0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 799 start_va = 0x7fefe330000 end_va = 0x7fefe34efff entry_point = 0x7fefe330000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 800 start_va = 0x7fefe350000 end_va = 0x7fefe35dfff entry_point = 0x7fefe350000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 801 start_va = 0x7feff740000 end_va = 0x7feff81afff entry_point = 0x7feff740000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 802 start_va = 0x7feff820000 end_va = 0x7feff94cfff entry_point = 0x7feff820000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 803 start_va = 0x7feff950000 end_va = 0x7feff97dfff entry_point = 0x7feff950000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 804 start_va = 0x7feff990000 end_va = 0x7feff990fff entry_point = 0x7feff990000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 805 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 806 start_va = 0x7fffffd3000 end_va = 0x7fffffd4fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 807 start_va = 0x7fffffd5000 end_va = 0x7fffffd6fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd5000" filename = "" Region: id = 808 start_va = 0x7fffffd7000 end_va = 0x7fffffd8fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd7000" filename = "" Region: id = 809 start_va = 0x7fffffd9000 end_va = 0x7fffffdafff entry_point = 0x0 region_type = private name = "private_0x000007fffffd9000" filename = "" Region: id = 810 start_va = 0x7fffffdb000 end_va = 0x7fffffdcfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdb000" filename = "" Region: id = 811 start_va = 0x7fffffdd000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdd000" filename = "" Region: id = 812 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 813 start_va = 0x7fef79d0000 end_va = 0x7fef7b7ffff entry_point = 0x7fef79d0000 region_type = mapped_file name = "vssapi.dll" filename = "\\Windows\\System32\\vssapi.dll" (normalized: "c:\\windows\\system32\\vssapi.dll") Thread: id = 40 os_tid = 0xb70 Thread: id = 41 os_tid = 0xb6c Thread: id = 42 os_tid = 0xb68 Thread: id = 43 os_tid = 0xb64 Thread: id = 44 os_tid = 0xb60 Thread: id = 45 os_tid = 0xb58