# Flog Txt Version 1 # Analyzer Version: 3.1.2 # Analyzer Build Date: Oct 28 2019 11:51:53 # Log Creation Date: 01.01.2020 11:39:18.042 Process: id = "1" image_name = "antirecuvaanddb.exe" filename = "c:\\users\\fd1hvy\\desktop\\antirecuvaanddb.exe" page_root = "0x69986000" os_pid = "0xf9c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Users\\FD1HVy\\Desktop\\AntiRecuvaAndDB.exe\" " cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103c1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1 os_tid = 0xf98 [0099.567] GetProcessHeap () returned 0xae0000 [0099.567] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x30) returned 0xaf32a8 [0099.567] GetProcessHeap () returned 0xae0000 [0099.567] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x3400) returned 0xaff588 [0099.582] GetProcessHeap () returned 0xae0000 [0099.582] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x204) returned 0xaf3750 [0099.583] GetProcessHeap () returned 0xae0000 [0099.583] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10) returned 0xafe078 [0099.584] GetTickCount () returned 0x1158fd8 [0099.584] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x4ff650 | out: lpWSAData=0x4ff650) returned 0 [0099.693] GetLocaleInfoW (in: Locale=0x800, LCType=0x58, lpLCData=0x4ff630, cchData=32 | out: lpLCData="\x03") returned 16 [0099.695] GetProcessHeap () returned 0xae0000 [0099.695] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x1c) returned 0xaead70 [0099.695] GetProcessHeap () returned 0xae0000 [0099.695] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x1c) returned 0xaeae10 [0099.695] GetVersion () returned 0x23f00206 [0099.695] GetCurrentProcess () returned 0xffffffff [0099.695] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x4ff5a4 | out: TokenHandle=0x4ff5a4*=0x20c) returned 1 [0099.696] GetTokenInformation (in: TokenHandle=0x20c, TokenInformationClass=0x14, TokenInformation=0x4ff59c, TokenInformationLength=0x4, ReturnLength=0x4ff5a0 | out: TokenInformation=0x4ff59c, ReturnLength=0x4ff5a0) returned 1 [0099.696] CloseHandle (hObject=0x20c) returned 1 [0099.696] GetProcessHeap () returned 0xae0000 [0099.696] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x20) returned 0xaeaed8 [0099.696] GetProcessHeap () returned 0xae0000 [0099.696] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x1e) returned 0xb07298 [0099.696] GetProcessHeap () returned 0xae0000 [0099.696] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x1e) returned 0xb07310 [0099.697] GetProcessHeap () returned 0xae0000 [0099.697] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x90) returned 0xaf1cd0 [0099.697] GetProcessHeap () returned 0xae0000 [0099.697] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf1cd0 | out: hHeap=0xae0000) returned 1 [0099.697] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xb07298, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0099.697] GetProcessHeap () returned 0xae0000 [0099.697] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07310 | out: hHeap=0xae0000) returned 1 [0099.697] GetProcessHeap () returned 0xae0000 [0099.697] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaeaed8 | out: hHeap=0xae0000) returned 1 [0099.698] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x4ff544, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x4ff544*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0099.698] GetProcessHeap () returned 0xae0000 [0099.698] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07298 | out: hHeap=0xae0000) returned 1 [0099.698] GetProcessHeap () returned 0xae0000 [0099.698] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x40) returned 0xaf2800 [0099.698] GetProcessHeap () returned 0xae0000 [0099.699] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x3a) returned 0xaf2578 [0099.699] GetProcessHeap () returned 0xae0000 [0099.699] RtlReAllocateHeap (Heap=0xae0000, Flags=0x0, Ptr=0xaf2578, Size=0x72) returned 0xaee818 [0099.699] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0099.700] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x20c [0099.700] WaitForSingleObject (hHandle=0x20c, dwMilliseconds=0x0) returned 0x0 [0099.701] GetProcessHeap () returned 0xae0000 [0099.701] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf2800 | out: hHeap=0xae0000) returned 1 [0099.701] GetProcessHeap () returned 0xae0000 [0099.701] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaee818 | out: hHeap=0xae0000) returned 1 [0099.701] GetProcessHeap () returned 0xae0000 [0099.701] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x20) returned 0xaeaed8 [0099.701] GetProcessHeap () returned 0xae0000 [0099.701] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x1e) returned 0xb06de8 [0099.701] GetProcessHeap () returned 0xae0000 [0099.701] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x1e) returned 0xb06dc0 [0099.701] GetProcessHeap () returned 0xae0000 [0099.701] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x90) returned 0xaf1cd0 [0099.701] GetProcessHeap () returned 0xae0000 [0099.701] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf1cd0 | out: hHeap=0xae0000) returned 1 [0099.702] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xb06de8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0099.702] GetProcessHeap () returned 0xae0000 [0099.702] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb06dc0 | out: hHeap=0xae0000) returned 1 [0099.702] GetProcessHeap () returned 0xae0000 [0099.702] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaeaed8 | out: hHeap=0xae0000) returned 1 [0099.702] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x4ff52c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x4ff52c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0099.702] GetProcessHeap () returned 0xae0000 [0099.703] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb06de8 | out: hHeap=0xae0000) returned 1 [0099.703] GetProcessHeap () returned 0xae0000 [0099.703] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x40) returned 0xaf2728 [0099.703] GetProcessHeap () returned 0xae0000 [0099.703] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x3a) returned 0xaf25c0 [0099.703] GetProcessHeap () returned 0xae0000 [0099.703] RtlReAllocateHeap (Heap=0xae0000, Flags=0x0, Ptr=0xaf25c0, Size=0x72) returned 0xb073c8 [0099.703] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x0 [0099.703] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000000") returned 0x210 [0099.704] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0x0) returned 0x0 [0099.704] GetProcessHeap () returned 0xae0000 [0099.704] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf2728 | out: hHeap=0xae0000) returned 1 [0099.704] GetProcessHeap () returned 0xae0000 [0099.704] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb073c8 | out: hHeap=0xae0000) returned 1 [0099.704] ReleaseMutex (hMutex=0x210) returned 1 [0099.704] CloseHandle (hObject=0x210) returned 1 [0099.704] GetProcessHeap () returned 0xae0000 [0099.704] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x30) returned 0xaf30b0 [0099.705] GetProcessHeap () returned 0xae0000 [0099.705] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x20a) returned 0xb074a8 [0099.705] GetVersion () returned 0x23f00206 [0099.705] GetProcessHeap () returned 0xae0000 [0099.705] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x50) returned 0xaee818 [0099.705] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75e90000 [0099.705] GetProcAddress (hModule=0x75e90000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75ea6b30 [0099.705] Wow64DisableWow64FsRedirection (in: OldValue=0x4ff580 | out: OldValue=0x4ff580*=0x0) returned 1 [0099.705] GetProcessHeap () returned 0xae0000 [0099.706] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaee818 | out: hHeap=0xae0000) returned 1 [0099.706] GetModuleHandleA (lpModuleName="advapi32.dll") returned 0x761b0000 [0099.706] GetProcAddress (hModule=0x761b0000, lpProcName="CreateProcessWithTokenW") returned 0x761c0c70 [0099.706] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xb074a8, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\AntiRecuvaAndDB.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\antirecuvaanddb.exe")) returned 0x2b [0099.706] GetShellWindow () returned 0x100f0 [0099.707] GetWindowThreadProcessId (in: hWnd=0x100f0, lpdwProcessId=0x4ff58c | out: lpdwProcessId=0x4ff58c) returned 0x864 [0099.708] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x860) returned 0x210 [0099.708] OpenProcessToken (in: ProcessHandle=0x210, DesiredAccess=0x2000000, TokenHandle=0x4ff59c | out: TokenHandle=0x4ff59c*=0x214) returned 1 [0099.709] DuplicateTokenEx (in: hExistingToken=0x214, dwDesiredAccess=0x2000000, lpTokenAttributes=0x4ff564, ImpersonationLevel=0x2, TokenType=0x1, phNewToken=0x4ff5a0 | out: phNewToken=0x4ff5a0*=0x218) returned 1 [0099.709] CreateProcessWithTokenW (in: hToken=0x218, dwLogonFlags=0x0, lpApplicationName="C:\\Users\\FD1HVy\\Desktop\\AntiRecuvaAndDB.exe", lpCommandLine=0x0, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x4ff518*(cb=0x0, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x4ff570 | out: lpCommandLine=0x0, lpProcessInformation=0x4ff570*(hProcess=0x254, hThread=0x258, dwProcessId=0xed4, dwThreadId=0xd58)) returned 1 [0099.972] GetProcessHeap () returned 0xae0000 [0099.972] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x50) returned 0xb095a8 [0099.973] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75e90000 [0099.973] GetProcAddress (hModule=0x75e90000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x75ea6b50 [0099.973] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0099.973] GetProcessHeap () returned 0xae0000 [0099.973] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb095a8 | out: hHeap=0xae0000) returned 1 [0099.973] CloseHandle (hObject=0x210) returned 1 [0099.973] CloseHandle (hObject=0x254) returned 1 [0099.973] CloseHandle (hObject=0x258) returned 1 [0099.973] CloseHandle (hObject=0x214) returned 1 [0099.973] CloseHandle (hObject=0x218) returned 1 [0099.974] GetProcessHeap () returned 0xae0000 [0099.974] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb074a8 | out: hHeap=0xae0000) returned 1 [0099.974] GetProcessHeap () returned 0xae0000 [0099.974] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf30b0 | out: hHeap=0xae0000) returned 1 [0099.974] Sleep (dwMilliseconds=0x1388) [0105.183] GetProcessHeap () returned 0xae0000 [0105.183] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x60) returned 0xaee5d8 [0105.185] GetProcessHeap () returned 0xae0000 [0105.185] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x5c) returned 0xae6ea8 [0105.185] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x913c1a, lpParameter=0xae6ea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x218 [0105.187] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0x1388) returned 0x102 [0111.079] CloseHandle (hObject=0x218) returned 1 [0111.079] GetProcessHeap () returned 0xae0000 [0111.080] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaee5d8 | out: hHeap=0xae0000) returned 1 [0111.080] GetProcessHeap () returned 0xae0000 [0111.080] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x60) returned 0xaee5d8 [0111.080] GetProcessHeap () returned 0xae0000 [0111.080] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x20) returned 0xb08370 [0111.080] GetProcessHeap () returned 0xae0000 [0111.080] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x1e) returned 0xb080c8 [0111.080] GetProcessHeap () returned 0xae0000 [0111.080] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x1e) returned 0xb082d0 [0111.080] GetProcessHeap () returned 0xae0000 [0111.081] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x90) returned 0xaf1cd0 [0111.081] GetProcessHeap () returned 0xae0000 [0111.081] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf1cd0 | out: hHeap=0xae0000) returned 1 [0111.081] ExpandEnvironmentStringsW (in: lpSrc="%localappdata%", lpDst=0xb080c8, nSize=0xf | out: lpDst="") returned 0x1e [0111.081] GetProcessHeap () returned 0xae0000 [0111.081] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb082d0 | out: hHeap=0xae0000) returned 1 [0111.081] GetProcessHeap () returned 0xae0000 [0111.081] RtlReAllocateHeap (Heap=0xae0000, Flags=0x0, Ptr=0xb080c8, Size=0x3a) returned 0xaf2728 [0111.081] GetProcessHeap () returned 0xae0000 [0111.081] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x3a) returned 0xaf23c8 [0111.081] GetProcessHeap () returned 0xae0000 [0111.081] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x90) returned 0xaf1cd0 [0111.081] GetProcessHeap () returned 0xae0000 [0111.081] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf1cd0 | out: hHeap=0xae0000) returned 1 [0111.082] ExpandEnvironmentStringsW (in: lpSrc="%localappdata%", lpDst=0xaf2728, nSize=0x1d | out: lpDst="") returned 0x1e [0111.082] GetProcessHeap () returned 0xae0000 [0111.082] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf23c8 | out: hHeap=0xae0000) returned 1 [0111.082] GetProcessHeap () returned 0xae0000 [0111.082] RtlReAllocateHeap (Heap=0xae0000, Flags=0x0, Ptr=0xaf2728, Size=0x72) returned 0xb06ec8 [0111.082] GetProcessHeap () returned 0xae0000 [0111.082] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x72) returned 0xb07248 [0111.082] GetProcessHeap () returned 0xae0000 [0111.082] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x90) returned 0xaf1cd0 [0111.082] GetProcessHeap () returned 0xae0000 [0111.082] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf1cd0 | out: hHeap=0xae0000) returned 1 [0111.082] ExpandEnvironmentStringsW (in: lpSrc="%localappdata%", lpDst=0xb06ec8, nSize=0x39 | out: lpDst="C:\\Users\\FD1HVy\\AppData\\Local") returned 0x1e [0111.082] GetProcessHeap () returned 0xae0000 [0111.082] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07248 | out: hHeap=0xae0000) returned 1 [0111.082] GetProcessHeap () returned 0xae0000 [0111.082] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb08370 | out: hHeap=0xae0000) returned 1 [0111.083] GetProcessHeap () returned 0xae0000 [0111.083] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x40) returned 0xaf2728 [0111.083] GetProcessHeap () returned 0xae0000 [0111.083] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x3e) returned 0xaf23c8 [0111.083] GetProcessHeap () returned 0xae0000 [0111.083] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x3e) returned 0xaf2218 [0111.083] GetProcessHeap () returned 0xae0000 [0111.083] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x90) returned 0xaf1cd0 [0111.083] GetProcessHeap () returned 0xae0000 [0111.083] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x10) returned 0xb07b68 [0111.083] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x4ff484 | out: phkResult=0x4ff484*=0x26c) returned 0x0 [0111.085] RegQueryValueExW (in: hKey=0x26c, lpValueName="Startup", lpReserved=0x0, lpType=0x4ff480, lpData=0xaf2218, lpcbData=0x4ff488*=0x3e | out: lpType=0x4ff480*=0x2, lpData=0xaf2218*=0x5c, lpcbData=0x4ff488*=0x98) returned 0xea [0111.085] RegCloseKey (hKey=0x26c) returned 0x0 [0111.086] GetProcessHeap () returned 0xae0000 [0111.086] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07b68 | out: hHeap=0xae0000) returned 1 [0111.086] GetProcessHeap () returned 0xae0000 [0111.086] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf1cd0 | out: hHeap=0xae0000) returned 1 [0111.086] GetProcessHeap () returned 0xae0000 [0111.086] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf2218 | out: hHeap=0xae0000) returned 1 [0111.086] GetProcessHeap () returned 0xae0000 [0111.086] RtlReAllocateHeap (Heap=0xae0000, Flags=0x0, Ptr=0xaf23c8, Size=0x7a) returned 0xae6718 [0111.086] GetProcessHeap () returned 0xae0000 [0111.086] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x7a) returned 0xaf1cd0 [0111.086] GetProcessHeap () returned 0xae0000 [0111.086] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x90) returned 0xaf1e88 [0111.086] GetProcessHeap () returned 0xae0000 [0111.086] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x10) returned 0xb07b38 [0111.086] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x4ff484 | out: phkResult=0x4ff484*=0x26c) returned 0x0 [0111.087] RegQueryValueExW (in: hKey=0x26c, lpValueName="Startup", lpReserved=0x0, lpType=0x4ff480, lpData=0xaf1cd0, lpcbData=0x4ff488*=0x7a | out: lpType=0x4ff480*=0x2, lpData=0xaf1cd0*=0x88, lpcbData=0x4ff488*=0x98) returned 0xea [0111.087] RegCloseKey (hKey=0x26c) returned 0x0 [0111.087] GetProcessHeap () returned 0xae0000 [0111.087] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07b38 | out: hHeap=0xae0000) returned 1 [0111.087] GetProcessHeap () returned 0xae0000 [0111.087] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf1e88 | out: hHeap=0xae0000) returned 1 [0111.087] GetProcessHeap () returned 0xae0000 [0111.087] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf1cd0 | out: hHeap=0xae0000) returned 1 [0111.087] GetProcessHeap () returned 0xae0000 [0111.087] RtlReAllocateHeap (Heap=0xae0000, Flags=0x0, Ptr=0xae6718, Size=0xf2) returned 0xaf10d8 [0111.087] GetProcessHeap () returned 0xae0000 [0111.087] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0xf2) returned 0xaeff68 [0111.088] GetProcessHeap () returned 0xae0000 [0111.088] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x90) returned 0xaf1cd0 [0111.088] GetProcessHeap () returned 0xae0000 [0111.088] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x10) returned 0xb07d00 [0111.088] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x4ff484 | out: phkResult=0x4ff484*=0x26c) returned 0x0 [0111.089] RegQueryValueExW (in: hKey=0x26c, lpValueName="Startup", lpReserved=0x0, lpType=0x4ff480, lpData=0xaeff68, lpcbData=0x4ff488*=0xf2 | out: lpType=0x4ff480*=0x2, lpData="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x4ff488*=0x98) returned 0x0 [0111.089] RegCloseKey (hKey=0x26c) returned 0x0 [0111.089] GetProcessHeap () returned 0xae0000 [0111.089] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07d00 | out: hHeap=0xae0000) returned 1 [0111.089] GetProcessHeap () returned 0xae0000 [0111.089] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x1e) returned 0xb082f8 [0111.089] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x4ff484 | out: phkResult=0x4ff484*=0x26c) returned 0x0 [0111.090] RegQueryValueExW (in: hKey=0x26c, lpValueName="Common Startup", lpReserved=0x0, lpType=0x4ff480, lpData=0xaf0000, lpcbData=0x4ff488*=0x5a | out: lpType=0x4ff480*=0x0, lpData=0xaf0000*=0x1a, lpcbData=0x4ff488*=0x5a) returned 0x2 [0111.090] RegCloseKey (hKey=0x26c) returned 0x0 [0111.090] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x4ff498 | out: phkResult=0x4ff498*=0x26c) returned 0x0 [0111.090] RegQueryValueExW (in: hKey=0x26c, lpValueName="Common Startup", lpReserved=0x0, lpType=0x4ff494, lpData=0xaf0000, lpcbData=0x4ff49c*=0x5a | out: lpType=0x4ff494*=0x2, lpData=0xaf0000*=0x1a, lpcbData=0x4ff49c*=0x78) returned 0xea [0111.090] RegCloseKey (hKey=0x26c) returned 0x0 [0111.090] GetProcessHeap () returned 0xae0000 [0111.090] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb082f8 | out: hHeap=0xae0000) returned 1 [0111.090] GetProcessHeap () returned 0xae0000 [0111.090] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf1cd0 | out: hHeap=0xae0000) returned 1 [0111.090] GetProcessHeap () returned 0xae0000 [0111.091] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaeff68 | out: hHeap=0xae0000) returned 1 [0111.091] GetProcessHeap () returned 0xae0000 [0111.091] RtlReAllocateHeap (Heap=0xae0000, Flags=0x0, Ptr=0xaf10d8, Size=0x1e2) returned 0xafe388 [0111.091] GetProcessHeap () returned 0xae0000 [0111.091] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x1e2) returned 0xb08ef0 [0111.091] GetProcessHeap () returned 0xae0000 [0111.091] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x90) returned 0xaf1cd0 [0111.091] GetProcessHeap () returned 0xae0000 [0111.092] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x10) returned 0xb07d00 [0111.092] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x4ff484 | out: phkResult=0x4ff484*=0x26c) returned 0x0 [0111.093] RegQueryValueExW (in: hKey=0x26c, lpValueName="Startup", lpReserved=0x0, lpType=0x4ff480, lpData=0xb08ef0, lpcbData=0x4ff488*=0x1e2 | out: lpType=0x4ff480*=0x2, lpData="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x4ff488*=0x98) returned 0x0 [0111.093] RegCloseKey (hKey=0x26c) returned 0x0 [0111.093] GetProcessHeap () returned 0xae0000 [0111.093] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07d00 | out: hHeap=0xae0000) returned 1 [0111.093] GetProcessHeap () returned 0xae0000 [0111.093] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x1e) returned 0xb07fd8 [0111.093] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x4ff484 | out: phkResult=0x4ff484*=0x26c) returned 0x0 [0111.093] RegQueryValueExW (in: hKey=0x26c, lpValueName="Common Startup", lpReserved=0x0, lpType=0x4ff480, lpData=0xb08f88, lpcbData=0x4ff488*=0x14a | out: lpType=0x4ff480*=0x0, lpData=0xb08f88*=0x0, lpcbData=0x4ff488*=0x14a) returned 0x2 [0111.093] RegCloseKey (hKey=0x26c) returned 0x0 [0111.094] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x4ff498 | out: phkResult=0x4ff498*=0x26c) returned 0x0 [0111.094] RegQueryValueExW (in: hKey=0x26c, lpValueName="Common Startup", lpReserved=0x0, lpType=0x4ff494, lpData=0xb08f88, lpcbData=0x4ff49c*=0x14a | out: lpType=0x4ff494*=0x2, lpData="%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x4ff49c*=0x78) returned 0x0 [0111.094] RegCloseKey (hKey=0x26c) returned 0x0 [0111.094] GetProcessHeap () returned 0xae0000 [0111.094] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07fd8 | out: hHeap=0xae0000) returned 1 [0111.094] GetProcessHeap () returned 0xae0000 [0111.094] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf1cd0 | out: hHeap=0xae0000) returned 1 [0111.094] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup;%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpDst=0xafe388, nSize=0xf1 | out: lpDst="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup;C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned 0x8b [0111.094] GetProcessHeap () returned 0xae0000 [0111.094] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb08ef0 | out: hHeap=0xae0000) returned 1 [0111.094] GetProcessHeap () returned 0xae0000 [0111.094] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf2728 | out: hHeap=0xae0000) returned 1 [0111.094] GetProcessHeap () returned 0xae0000 [0111.095] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x20a) returned 0xb08ef0 [0111.095] GetProcessHeap () returned 0xae0000 [0111.095] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x20a) returned 0xb074a8 [0111.095] GetProcessHeap () returned 0xae0000 [0111.095] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x20a) returned 0xb0c8a8 [0111.095] GetProcessHeap () returned 0xae0000 [0111.095] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x20a) returned 0xb0cac0 [0111.095] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xb08ef0, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\AntiRecuvaAndDB.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\antirecuvaanddb.exe")) returned 0x2b [0111.095] GetProcessHeap () returned 0xae0000 [0111.095] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x20a) returned 0xb0ccd8 [0111.095] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xb0ccd8, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\AntiRecuvaAndDB.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\antirecuvaanddb.exe")) returned 0x2b [0111.095] GetProcessHeap () returned 0xae0000 [0111.095] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb0ccd8 | out: hHeap=0xae0000) returned 1 [0111.095] GetProcessHeap () returned 0xae0000 [0111.095] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x20a) returned 0xb0ccd8 [0111.096] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xb0ccd8, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\AntiRecuvaAndDB.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\antirecuvaanddb.exe")) returned 0x2b [0111.096] GetProcessHeap () returned 0xae0000 [0111.096] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb0ccd8 | out: hHeap=0xae0000) returned 1 [0111.096] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\AntiRecuvaAndDB.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\antirecuvaanddb.exe"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\AntiRecuvaAndDB.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\antirecuvaanddb.exe"), bFailIfExists=0) returned 1 [0111.328] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x20106, phkResult=0x4ff580 | out: phkResult=0x4ff580*=0x26c) returned 0x0 [0111.328] RegSetValueExW (in: hKey=0x26c, lpValueName="AntiRecuvaAndDB", Reserved=0x0, dwType=0x1, lpData="C:\\Users\\FD1HVy\\AppData\\Local\\AntiRecuvaAndDB.exe", cbData=0x62 | out: lpData="C:\\Users\\FD1HVy\\AppData\\Local\\AntiRecuvaAndDB.exe") returned 0x0 [0111.329] RegCloseKey (hKey=0x26c) returned 0x0 [0111.329] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x20106, phkResult=0x4ff57c | out: phkResult=0x4ff57c*=0x26c) returned 0x0 [0111.329] RegSetValueExW (in: hKey=0x26c, lpValueName="AntiRecuvaAndDB", Reserved=0x0, dwType=0x1, lpData="C:\\Users\\FD1HVy\\AppData\\Local\\AntiRecuvaAndDB.exe", cbData=0x62 | out: lpData="C:\\Users\\FD1HVy\\AppData\\Local\\AntiRecuvaAndDB.exe") returned 0x0 [0111.329] RegCloseKey (hKey=0x26c) returned 0x0 [0111.329] GetProcessHeap () returned 0xae0000 [0111.330] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x118) returned 0xaf1238 [0111.330] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\AntiRecuvaAndDB.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\antirecuvaanddb.exe"), lpNewFileName="c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\AntiRecuvaAndDB.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\antirecuvaanddb.exe"), bFailIfExists=1) returned 0 [0111.331] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\AntiRecuvaAndDB.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\antirecuvaanddb.exe"), lpNewFileName="c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\AntiRecuvaAndDB.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\antirecuvaanddb.exe"), bFailIfExists=1) returned 1 [0111.351] GetProcessHeap () returned 0xae0000 [0111.352] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf1238 | out: hHeap=0xae0000) returned 1 [0111.352] GetProcessHeap () returned 0xae0000 [0111.352] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb08ef0 | out: hHeap=0xae0000) returned 1 [0111.352] GetProcessHeap () returned 0xae0000 [0111.352] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb074a8 | out: hHeap=0xae0000) returned 1 [0111.352] GetProcessHeap () returned 0xae0000 [0111.352] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb0c8a8 | out: hHeap=0xae0000) returned 1 [0111.352] GetProcessHeap () returned 0xae0000 [0111.352] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb0cac0 | out: hHeap=0xae0000) returned 1 [0111.352] GetProcessHeap () returned 0xae0000 [0111.352] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaee5d8 | out: hHeap=0xae0000) returned 1 [0111.352] GetProcessHeap () returned 0xae0000 [0111.352] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb06ec8 | out: hHeap=0xae0000) returned 1 [0111.352] GetProcessHeap () returned 0xae0000 [0111.352] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xafe388 | out: hHeap=0xae0000) returned 1 [0111.352] GetProcessHeap () returned 0xae0000 [0111.353] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x20) returned 0xb07fd8 [0111.353] GetProcessHeap () returned 0xae0000 [0111.353] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x1e) returned 0xb080f0 [0111.353] GetProcessHeap () returned 0xae0000 [0111.353] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x1e) returned 0xb08280 [0111.353] GetProcessHeap () returned 0xae0000 [0111.353] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x90) returned 0xaf1cd0 [0111.353] GetProcessHeap () returned 0xae0000 [0111.353] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf1cd0 | out: hHeap=0xae0000) returned 1 [0111.353] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xb080f0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0111.353] GetProcessHeap () returned 0xae0000 [0111.353] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb08280 | out: hHeap=0xae0000) returned 1 [0111.353] GetProcessHeap () returned 0xae0000 [0111.353] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07fd8 | out: hHeap=0xae0000) returned 1 [0111.353] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x4ff59c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x4ff59c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0111.401] GetProcessHeap () returned 0xae0000 [0111.401] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb080f0 | out: hHeap=0xae0000) returned 1 [0111.401] GetProcessHeap () returned 0xae0000 [0111.402] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x28) returned 0xaf6b40 [0111.402] GetProcessHeap () returned 0xae0000 [0111.402] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10) returned 0xb07c10 [0111.402] GetProcessHeap () returned 0xae0000 [0111.402] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x50) returned 0xb09810 [0111.402] GetProcessHeap () returned 0xae0000 [0111.402] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x4e) returned 0xb09918 [0111.402] GetProcessHeap () returned 0xae0000 [0111.402] RtlReAllocateHeap (Heap=0xae0000, Flags=0x0, Ptr=0xb09918, Size=0x9a) returned 0xaf1cd0 [0111.402] GetProcessHeap () returned 0xae0000 [0111.402] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10) returned 0xb07cd0 [0111.402] GetProcessHeap () returned 0xae0000 [0111.402] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x190) returned 0xafe388 [0111.402] GetProcessHeap () returned 0xae0000 [0111.402] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x250) returned 0xb08ef0 [0111.403] GetProcessHeap () returned 0xae0000 [0111.403] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x90) returned 0xaf1e88 [0111.403] GetProcessHeap () returned 0xae0000 [0111.403] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x84) returned 0xaee338 [0111.403] GetProcessHeap () returned 0xae0000 [0111.403] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x84) returned 0xaf2e00 [0111.403] GetProcessHeap () returned 0xae0000 [0111.403] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x90) returned 0xb09148 [0111.403] GetProcessHeap () returned 0xae0000 [0111.403] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb09148 | out: hHeap=0xae0000) returned 1 [0111.403] ExpandEnvironmentStringsW (in: lpSrc="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys", lpDst=0xaee338, nSize=0x42 | out: lpDst="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys") returned 0x42 [0111.403] GetProcessHeap () returned 0xae0000 [0111.403] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf2e00 | out: hHeap=0xae0000) returned 1 [0111.403] GetProcessHeap () returned 0xae0000 [0111.403] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf1e88 | out: hHeap=0xae0000) returned 1 [0111.404] GetProcessHeap () returned 0xae0000 [0111.404] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0xc0) returned 0xaf2e00 [0111.404] GetProcessHeap () returned 0xae0000 [0111.404] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0xb8) returned 0xb09148 [0111.404] GetProcessHeap () returned 0xae0000 [0111.404] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0xb8) returned 0xaf10d8 [0111.404] GetProcessHeap () returned 0xae0000 [0111.404] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x90) returned 0xaf1e88 [0111.404] GetProcessHeap () returned 0xae0000 [0111.404] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf1e88 | out: hHeap=0xae0000) returned 1 [0111.404] ExpandEnvironmentStringsW (in: lpSrc="C:\\Windows;C:\\ProgramData\\microsoft\\windows\\caches;C:\\Users\\admin\\microsoft\\windows\\caches;", lpDst=0xb09148, nSize=0x5c | out: lpDst="C:\\Windows;C:\\ProgramData\\microsoft\\windows\\caches;C:\\Users\\admin\\microsoft\\windows\\caches;") returned 0x5c [0111.404] GetProcessHeap () returned 0xae0000 [0111.404] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf10d8 | out: hHeap=0xae0000) returned 1 [0111.404] GetProcessHeap () returned 0xae0000 [0111.404] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf2e00 | out: hHeap=0xae0000) returned 1 [0111.405] GetProcessHeap () returned 0xae0000 [0111.405] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x20a) returned 0xb074a8 [0111.405] GetProcessHeap () returned 0xae0000 [0111.405] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x20a) returned 0xb0c8a8 [0111.405] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xb0c8a8, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\AntiRecuvaAndDB.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\antirecuvaanddb.exe")) returned 0x2b [0111.405] GetProcessHeap () returned 0xae0000 [0111.405] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb0c8a8 | out: hHeap=0xae0000) returned 1 [0111.405] GetProcessHeap () returned 0xae0000 [0111.405] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x184) returned 0xb076c0 [0111.405] GetProcessHeap () returned 0xae0000 [0111.405] RtlReAllocateHeap (Heap=0xae0000, Flags=0x0, Ptr=0xb076c0, Size=0x3ce) returned 0xb0c8a8 [0111.405] GetProcessHeap () returned 0xae0000 [0111.405] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x86) returned 0xaf1e88 [0111.405] GetProcessHeap () returned 0xae0000 [0111.405] RtlReAllocateHeap (Heap=0xae0000, Flags=0x0, Ptr=0xaf1e88, Size=0xae) returned 0xaf1e88 [0111.405] GetProcessHeap () returned 0xae0000 [0111.406] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0xba) returned 0xaf2e00 [0111.406] GetProcessHeap () returned 0xae0000 [0111.406] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb074a8 | out: hHeap=0xae0000) returned 1 [0111.406] GetProcessHeap () returned 0xae0000 [0111.406] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xafe388 | out: hHeap=0xae0000) returned 1 [0111.406] GetProcessHeap () returned 0xae0000 [0111.406] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb08ef0 | out: hHeap=0xae0000) returned 1 [0111.406] GetProcessHeap () returned 0xae0000 [0111.406] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaee338 | out: hHeap=0xae0000) returned 1 [0111.406] GetProcessHeap () returned 0xae0000 [0111.406] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb09148 | out: hHeap=0xae0000) returned 1 [0111.406] GetProcessHeap () returned 0xae0000 [0111.406] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07c10 | out: hHeap=0xae0000) returned 1 [0111.406] GetProcessHeap () returned 0xae0000 [0111.406] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb09810 | out: hHeap=0xae0000) returned 1 [0111.407] GetProcessHeap () returned 0xae0000 [0111.407] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x20) returned 0xb08000 [0111.407] GetProcessHeap () returned 0xae0000 [0111.407] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x1e) returned 0xb07f38 [0111.407] GetProcessHeap () returned 0xae0000 [0111.407] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x1e) returned 0xb07f88 [0111.407] GetProcessHeap () returned 0xae0000 [0111.407] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x90) returned 0xaee338 [0111.407] GetProcessHeap () returned 0xae0000 [0111.407] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaee338 | out: hHeap=0xae0000) returned 1 [0111.407] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xb07f38, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0111.407] GetProcessHeap () returned 0xae0000 [0111.407] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07f88 | out: hHeap=0xae0000) returned 1 [0111.407] GetProcessHeap () returned 0xae0000 [0111.407] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb08000 | out: hHeap=0xae0000) returned 1 [0111.408] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x4ff59c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x4ff59c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0111.408] GetProcessHeap () returned 0xae0000 [0111.408] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07f38 | out: hHeap=0xae0000) returned 1 [0111.408] GetProcessHeap () returned 0xae0000 [0111.408] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x28) returned 0xaf6b70 [0111.408] GetProcessHeap () returned 0xae0000 [0111.408] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10) returned 0xb07da8 [0111.408] GetProcessHeap () returned 0xae0000 [0111.408] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x50) returned 0xb09760 [0111.408] GetProcessHeap () returned 0xae0000 [0111.409] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x4e) returned 0xb09b28 [0111.409] GetProcessHeap () returned 0xae0000 [0111.409] RtlReAllocateHeap (Heap=0xae0000, Flags=0x0, Ptr=0xb09b28, Size=0x9a) returned 0xaee338 [0111.409] GetProcessHeap () returned 0xae0000 [0111.409] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10) returned 0xb07d18 [0111.409] GetProcessHeap () returned 0xae0000 [0111.409] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x190) returned 0xafe388 [0111.409] GetProcessHeap () returned 0xae0000 [0111.409] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x250) returned 0xb08ef0 [0111.409] GetProcessHeap () returned 0xae0000 [0111.409] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x90) returned 0xb09148 [0111.409] GetProcessHeap () returned 0xae0000 [0111.409] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x84) returned 0xaf10d8 [0111.409] GetProcessHeap () returned 0xae0000 [0111.409] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x84) returned 0xaeff68 [0111.409] GetProcessHeap () returned 0xae0000 [0111.410] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x90) returned 0xaef490 [0111.410] GetProcessHeap () returned 0xae0000 [0111.410] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaef490 | out: hHeap=0xae0000) returned 1 [0111.410] ExpandEnvironmentStringsW (in: lpSrc="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys", lpDst=0xaf10d8, nSize=0x42 | out: lpDst="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys") returned 0x42 [0111.410] GetProcessHeap () returned 0xae0000 [0111.410] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaeff68 | out: hHeap=0xae0000) returned 1 [0111.410] GetProcessHeap () returned 0xae0000 [0111.410] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb09148 | out: hHeap=0xae0000) returned 1 [0111.410] GetProcessHeap () returned 0xae0000 [0111.410] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0xc0) returned 0xb09148 [0111.410] GetProcessHeap () returned 0xae0000 [0111.410] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0xb8) returned 0xaeff68 [0111.410] GetProcessHeap () returned 0xae0000 [0111.410] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0xb8) returned 0xaef490 [0111.410] GetProcessHeap () returned 0xae0000 [0111.411] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x90) returned 0xaf1238 [0111.411] GetProcessHeap () returned 0xae0000 [0111.411] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf1238 | out: hHeap=0xae0000) returned 1 [0111.411] ExpandEnvironmentStringsW (in: lpSrc="C:\\Windows;C:\\ProgramData\\microsoft\\windows\\caches;C:\\Users\\admin\\microsoft\\windows\\caches;", lpDst=0xaeff68, nSize=0x5c | out: lpDst="C:\\Windows;C:\\ProgramData\\microsoft\\windows\\caches;C:\\Users\\admin\\microsoft\\windows\\caches;") returned 0x5c [0111.411] GetProcessHeap () returned 0xae0000 [0111.411] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaef490 | out: hHeap=0xae0000) returned 1 [0111.411] GetProcessHeap () returned 0xae0000 [0111.411] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb09148 | out: hHeap=0xae0000) returned 1 [0111.411] GetProcessHeap () returned 0xae0000 [0111.411] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x20a) returned 0xb074a8 [0111.411] GetProcessHeap () returned 0xae0000 [0111.411] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x20a) returned 0xb0cc80 [0111.411] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xb0cc80, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\AntiRecuvaAndDB.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\antirecuvaanddb.exe")) returned 0x2b [0111.411] GetProcessHeap () returned 0xae0000 [0111.411] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb0cc80 | out: hHeap=0xae0000) returned 1 [0111.412] GetProcessHeap () returned 0xae0000 [0111.412] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x184) returned 0xb076c0 [0111.412] GetProcessHeap () returned 0xae0000 [0111.412] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x24e) returned 0xb0cc80 [0111.412] GetProcessHeap () returned 0xae0000 [0111.412] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x86) returned 0xb09148 [0111.412] GetProcessHeap () returned 0xae0000 [0111.412] RtlReAllocateHeap (Heap=0xae0000, Flags=0x0, Ptr=0xb09148, Size=0xae) returned 0xb09148 [0111.412] GetProcessHeap () returned 0xae0000 [0111.412] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0xba) returned 0xaef490 [0111.412] GetProcessHeap () returned 0xae0000 [0111.412] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb074a8 | out: hHeap=0xae0000) returned 1 [0111.412] GetProcessHeap () returned 0xae0000 [0111.412] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xafe388 | out: hHeap=0xae0000) returned 1 [0111.412] GetProcessHeap () returned 0xae0000 [0111.412] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb08ef0 | out: hHeap=0xae0000) returned 1 [0111.413] GetProcessHeap () returned 0xae0000 [0111.413] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf10d8 | out: hHeap=0xae0000) returned 1 [0111.413] GetProcessHeap () returned 0xae0000 [0111.413] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaeff68 | out: hHeap=0xae0000) returned 1 [0111.413] GetProcessHeap () returned 0xae0000 [0111.413] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07da8 | out: hHeap=0xae0000) returned 1 [0111.413] GetProcessHeap () returned 0xae0000 [0111.413] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb09760 | out: hHeap=0xae0000) returned 1 [0111.413] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x912013, lpParameter=0x4ff5c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26c [0111.416] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x911fab, lpParameter=0x4ff5d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x268 [0111.418] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x911e4e, lpParameter=0x4ff5e4, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x298 [0111.419] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x911859, lpParameter=0x4ff5d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29c [0111.421] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x91197c, lpParameter=0x4ff5d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a0 [0111.422] WaitForSingleObject (hHandle=0x29c, dwMilliseconds=0xffffffff) Thread: id = 2 os_tid = 0xf08 Thread: id = 3 os_tid = 0x84 Thread: id = 11 os_tid = 0xdb8 [0105.233] GetProcessHeap () returned 0xae0000 [0105.233] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x20) returned 0xb080a0 [0105.233] GetProcessHeap () returned 0xae0000 [0105.234] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x14) returned 0xaf8520 [0105.234] GetProcessHeap () returned 0xae0000 [0105.234] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x14) returned 0xaf83e0 [0105.234] GetProcessHeap () returned 0xae0000 [0105.234] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x90) returned 0xb09f40 [0105.234] GetProcessHeap () returned 0xae0000 [0105.234] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb09f40 | out: hHeap=0xae0000) returned 1 [0105.234] ExpandEnvironmentStringsW (in: lpSrc="%comspec%", lpDst=0xaf8520, nSize=0xa | out: lpDst="") returned 0x1c [0105.234] GetProcessHeap () returned 0xae0000 [0105.234] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf83e0 | out: hHeap=0xae0000) returned 1 [0105.234] GetProcessHeap () returned 0xae0000 [0105.234] RtlReAllocateHeap (Heap=0xae0000, Flags=0x0, Ptr=0xaf8520, Size=0x26) returned 0xaf6b40 [0105.234] GetProcessHeap () returned 0xae0000 [0105.234] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x26) returned 0xaf6b70 [0105.234] GetProcessHeap () returned 0xae0000 [0105.234] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x90) returned 0xb09f40 [0105.235] GetProcessHeap () returned 0xae0000 [0105.235] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb09f40 | out: hHeap=0xae0000) returned 1 [0105.235] ExpandEnvironmentStringsW (in: lpSrc="%comspec%", lpDst=0xaf6b40, nSize=0x13 | out: lpDst="") returned 0x1c [0105.235] GetProcessHeap () returned 0xae0000 [0105.235] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf6b70 | out: hHeap=0xae0000) returned 1 [0105.235] GetProcessHeap () returned 0xae0000 [0105.235] RtlReAllocateHeap (Heap=0xae0000, Flags=0x0, Ptr=0xaf6b40, Size=0x4a) returned 0xb09c88 [0105.235] GetProcessHeap () returned 0xae0000 [0105.235] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x4a) returned 0xb09868 [0105.235] GetProcessHeap () returned 0xae0000 [0105.235] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x90) returned 0xb09f40 [0105.235] GetProcessHeap () returned 0xae0000 [0105.235] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb09f40 | out: hHeap=0xae0000) returned 1 [0105.235] ExpandEnvironmentStringsW (in: lpSrc="%comspec%", lpDst=0xb09c88, nSize=0x25 | out: lpDst="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0105.235] GetProcessHeap () returned 0xae0000 [0105.236] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb09868 | out: hHeap=0xae0000) returned 1 [0105.236] GetProcessHeap () returned 0xae0000 [0105.236] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb080a0 | out: hHeap=0xae0000) returned 1 [0105.236] GetProcessHeap () returned 0xae0000 [0105.236] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x50) returned 0xb09970 [0105.236] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75e90000 [0105.236] GetProcAddress (hModule=0x75e90000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75ea6b30 [0105.237] Wow64DisableWow64FsRedirection (in: OldValue=0x23af73c | out: OldValue=0x23af73c*=0x0) returned 1 [0105.237] GetProcessHeap () returned 0xae0000 [0105.237] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb09970 | out: hHeap=0xae0000) returned 1 [0105.237] CreatePipe (in: hReadPipe=0x23af730, hWritePipe=0x23af72c, lpPipeAttributes=0x23af74c, nSize=0x0 | out: hReadPipe=0x23af730*=0x258, hWritePipe=0x23af72c*=0x254) returned 1 [0105.238] CreatePipe (in: hReadPipe=0x23af734, hWritePipe=0x23af738, lpPipeAttributes=0x23af74c, nSize=0x0 | out: hReadPipe=0x23af734*=0x210, hWritePipe=0x23af738*=0x25c) returned 1 [0105.239] SetHandleInformation (hObject=0x254, dwMask=0x1, dwFlags=0x0) returned 1 [0105.239] SetHandleInformation (hObject=0x210, dwMask=0x1, dwFlags=0x0) returned 1 [0105.239] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\cmd.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x23af768*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x258, hStdOutput=0x25c, hStdError=0x25c), lpProcessInformation=0x23af758 | out: lpCommandLine=0x0, lpProcessInformation=0x23af758*(hProcess=0x264, hThread=0x260, dwProcessId=0xdc4, dwThreadId=0x540)) returned 1 [0105.858] WriteFile (in: hFile=0x254, lpBuffer=0xae6ea8*, nNumberOfBytesToWrite=0x5b, lpNumberOfBytesWritten=0x23af748, lpOverlapped=0x0 | out: lpBuffer=0xae6ea8*, lpNumberOfBytesWritten=0x23af748*=0x5b, lpOverlapped=0x0) returned 1 [0105.858] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0xffffffff) Thread: id = 16 os_tid = 0xfac [0111.486] GetVersion () returned 0x23f00206 [0111.486] GetCurrentProcess () returned 0xffffffff [0111.486] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x24afb60 | out: TokenHandle=0x24afb60*=0x2a4) returned 1 [0111.486] GetTokenInformation (in: TokenHandle=0x2a4, TokenInformationClass=0x14, TokenInformation=0x24afb58, TokenInformationLength=0x4, ReturnLength=0x24afb5c | out: TokenInformation=0x24afb58, ReturnLength=0x24afb5c) returned 1 [0111.486] CloseHandle (hObject=0x2a4) returned 1 [0111.486] GetProcessHeap () returned 0xae0000 [0111.486] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x20) returned 0xb080a0 [0111.486] GetProcessHeap () returned 0xae0000 [0111.486] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x1e) returned 0xb08140 [0111.486] GetProcessHeap () returned 0xae0000 [0111.486] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x1e) returned 0xb07f88 [0111.487] GetProcessHeap () returned 0xae0000 [0111.487] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x90) returned 0xaf10d8 [0111.487] GetProcessHeap () returned 0xae0000 [0111.487] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf10d8 | out: hHeap=0xae0000) returned 1 [0111.487] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xb08140, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0111.487] GetProcessHeap () returned 0xae0000 [0111.487] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07f88 | out: hHeap=0xae0000) returned 1 [0111.487] GetProcessHeap () returned 0xae0000 [0111.487] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb080a0 | out: hHeap=0xae0000) returned 1 [0111.487] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x24afae8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x24afae8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0111.488] GetProcessHeap () returned 0xae0000 [0111.488] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb08140 | out: hHeap=0xae0000) returned 1 [0111.488] GetProcessHeap () returned 0xae0000 [0111.488] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x40) returned 0xaf2890 [0111.488] GetProcessHeap () returned 0xae0000 [0111.488] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x3a) returned 0xaf2218 [0111.488] GetProcessHeap () returned 0xae0000 [0111.488] RtlReAllocateHeap (Heap=0xae0000, Flags=0x0, Ptr=0xaf2218, Size=0x72) returned 0xb06fc8 [0111.488] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2a4 [0111.489] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0x0) returned 0x102 [0111.489] CloseHandle (hObject=0x2a4) returned 1 [0111.489] GetProcessHeap () returned 0xae0000 [0111.489] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf2890 | out: hHeap=0xae0000) returned 1 [0111.489] GetProcessHeap () returned 0xae0000 [0111.489] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb06fc8 | out: hHeap=0xae0000) returned 1 [0111.489] Sleep (dwMilliseconds=0x3e8) [0112.921] GetProcessHeap () returned 0xae0000 [0112.922] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x20) returned 0xb08258 [0112.922] GetProcessHeap () returned 0xae0000 [0112.922] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x1e) returned 0xb08050 [0112.922] GetProcessHeap () returned 0xae0000 [0112.922] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x1e) returned 0xb08000 [0112.922] GetProcessHeap () returned 0xae0000 [0112.922] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x90) returned 0xaf10d8 [0112.922] GetProcessHeap () returned 0xae0000 [0112.922] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf10d8 | out: hHeap=0xae0000) returned 1 [0112.922] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xb08050, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0112.922] GetProcessHeap () returned 0xae0000 [0112.922] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb08000 | out: hHeap=0xae0000) returned 1 [0112.922] GetProcessHeap () returned 0xae0000 [0112.922] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb08258 | out: hHeap=0xae0000) returned 1 [0112.922] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x24afae8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x24afae8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0112.923] GetProcessHeap () returned 0xae0000 [0112.923] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb08050 | out: hHeap=0xae0000) returned 1 [0112.923] GetProcessHeap () returned 0xae0000 [0112.923] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x40) returned 0xaf2770 [0112.923] GetProcessHeap () returned 0xae0000 [0112.923] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x3a) returned 0xaf2260 [0112.923] GetProcessHeap () returned 0xae0000 [0112.923] RtlReAllocateHeap (Heap=0xae0000, Flags=0x0, Ptr=0xaf2260, Size=0x72) returned 0xb07348 [0112.923] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2f0 [0112.924] WaitForSingleObject (hHandle=0x2f0, dwMilliseconds=0x0) returned 0x102 [0112.924] CloseHandle (hObject=0x2f0) returned 1 [0112.924] GetProcessHeap () returned 0xae0000 [0112.924] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf2770 | out: hHeap=0xae0000) returned 1 [0112.924] GetProcessHeap () returned 0xae0000 [0112.924] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07348 | out: hHeap=0xae0000) returned 1 [0112.924] Sleep (dwMilliseconds=0x3e8) [0114.787] GetProcessHeap () returned 0xae0000 [0114.787] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x20) returned 0xb08000 [0114.787] GetProcessHeap () returned 0xae0000 [0114.787] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x1e) returned 0xb083c0 [0114.787] GetProcessHeap () returned 0xae0000 [0114.787] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x1e) returned 0xb08050 [0114.787] GetProcessHeap () returned 0xae0000 [0114.787] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x90) returned 0xaf10d8 [0114.787] GetProcessHeap () returned 0xae0000 [0114.787] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf10d8 | out: hHeap=0xae0000) returned 1 [0114.787] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xb083c0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0114.788] GetProcessHeap () returned 0xae0000 [0114.788] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb08050 | out: hHeap=0xae0000) returned 1 [0114.788] GetProcessHeap () returned 0xae0000 [0114.788] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb08000 | out: hHeap=0xae0000) returned 1 [0114.788] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x24afae8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x24afae8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0114.788] GetProcessHeap () returned 0xae0000 [0114.788] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb083c0 | out: hHeap=0xae0000) returned 1 [0114.790] GetProcessHeap () returned 0xae0000 [0114.790] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x40) returned 0xaf2608 [0114.790] GetProcessHeap () returned 0xae0000 [0114.791] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x3a) returned 0xaf2260 [0114.791] GetProcessHeap () returned 0xae0000 [0114.791] RtlReAllocateHeap (Heap=0xae0000, Flags=0x0, Ptr=0xaf2260, Size=0x72) returned 0xb06fc8 [0114.791] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x300 [0114.791] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0x0) returned 0x102 [0114.791] CloseHandle (hObject=0x300) returned 1 [0114.791] GetProcessHeap () returned 0xae0000 [0114.791] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf2608 | out: hHeap=0xae0000) returned 1 [0114.791] GetProcessHeap () returned 0xae0000 [0114.791] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb06fc8 | out: hHeap=0xae0000) returned 1 [0114.792] Sleep (dwMilliseconds=0x3e8) [0116.231] GetProcessHeap () returned 0xae0000 [0116.231] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x20) returned 0xb07f38 [0116.231] GetProcessHeap () returned 0xae0000 [0116.231] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x1e) returned 0xb083e8 [0116.231] GetProcessHeap () returned 0xae0000 [0116.232] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x1e) returned 0xb07f88 [0116.232] GetProcessHeap () returned 0xae0000 [0116.232] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x90) returned 0xaf10d8 [0116.232] GetProcessHeap () returned 0xae0000 [0116.232] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf10d8 | out: hHeap=0xae0000) returned 1 [0116.232] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xb083e8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0116.232] GetProcessHeap () returned 0xae0000 [0116.232] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07f88 | out: hHeap=0xae0000) returned 1 [0116.232] GetProcessHeap () returned 0xae0000 [0116.232] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07f38 | out: hHeap=0xae0000) returned 1 [0116.232] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x24afae8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x24afae8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0116.233] GetProcessHeap () returned 0xae0000 [0116.233] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb083e8 | out: hHeap=0xae0000) returned 1 [0116.233] GetProcessHeap () returned 0xae0000 [0116.233] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x40) returned 0xaf2218 [0116.233] GetProcessHeap () returned 0xae0000 [0116.233] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x3a) returned 0xaf2728 [0116.233] GetProcessHeap () returned 0xae0000 [0116.233] RtlReAllocateHeap (Heap=0xae0000, Flags=0x0, Ptr=0xaf2728, Size=0x72) returned 0xb070c8 [0116.233] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2fc [0116.233] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x0) returned 0x102 [0116.233] CloseHandle (hObject=0x2fc) returned 1 [0116.234] GetProcessHeap () returned 0xae0000 [0116.234] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf2218 | out: hHeap=0xae0000) returned 1 [0116.234] GetProcessHeap () returned 0xae0000 [0116.234] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb070c8 | out: hHeap=0xae0000) returned 1 [0116.234] Sleep (dwMilliseconds=0x3e8) [0118.047] GetProcessHeap () returned 0xae0000 [0118.048] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x20) returned 0xb082d0 [0118.048] GetProcessHeap () returned 0xae0000 [0118.048] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x1e) returned 0xb083e8 [0118.048] GetProcessHeap () returned 0xae0000 [0118.048] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x1e) returned 0xb07f88 [0118.048] GetProcessHeap () returned 0xae0000 [0118.048] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x90) returned 0xaf10d8 [0118.048] GetProcessHeap () returned 0xae0000 [0118.048] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf10d8 | out: hHeap=0xae0000) returned 1 [0118.048] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xb083e8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0118.048] GetProcessHeap () returned 0xae0000 [0118.048] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07f88 | out: hHeap=0xae0000) returned 1 [0118.048] GetProcessHeap () returned 0xae0000 [0118.048] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb082d0 | out: hHeap=0xae0000) returned 1 [0118.048] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x24afae8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x24afae8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0118.049] GetProcessHeap () returned 0xae0000 [0118.049] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb083e8 | out: hHeap=0xae0000) returned 1 [0118.049] GetProcessHeap () returned 0xae0000 [0118.049] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x40) returned 0xaf2608 [0118.049] GetProcessHeap () returned 0xae0000 [0118.049] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x3a) returned 0xaf2728 [0118.049] GetProcessHeap () returned 0xae0000 [0118.050] RtlReAllocateHeap (Heap=0xae0000, Flags=0x0, Ptr=0xaf2728, Size=0x72) returned 0xb07348 [0118.050] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x314 [0118.050] WaitForSingleObject (hHandle=0x314, dwMilliseconds=0x0) returned 0x102 [0118.050] CloseHandle (hObject=0x314) returned 1 [0118.050] GetProcessHeap () returned 0xae0000 [0118.050] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf2608 | out: hHeap=0xae0000) returned 1 [0118.050] GetProcessHeap () returned 0xae0000 [0118.050] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07348 | out: hHeap=0xae0000) returned 1 [0118.050] Sleep (dwMilliseconds=0x3e8) [0119.321] GetProcessHeap () returned 0xae0000 [0119.321] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x20) returned 0xb08258 [0119.321] GetProcessHeap () returned 0xae0000 [0119.321] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x1e) returned 0xb083e8 [0119.322] GetProcessHeap () returned 0xae0000 [0119.322] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x1e) returned 0xb07f38 [0119.322] GetProcessHeap () returned 0xae0000 [0119.322] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x90) returned 0xaf10d8 [0119.531] GetProcessHeap () returned 0xae0000 [0119.531] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf10d8 | out: hHeap=0xae0000) returned 1 [0119.531] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xb083e8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0119.531] GetProcessHeap () returned 0xae0000 [0119.531] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07f38 | out: hHeap=0xae0000) returned 1 [0119.531] GetProcessHeap () returned 0xae0000 [0119.531] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb08258 | out: hHeap=0xae0000) returned 1 [0119.531] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x24afae8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x24afae8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0119.532] GetProcessHeap () returned 0xae0000 [0119.532] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb083e8 | out: hHeap=0xae0000) returned 1 [0119.532] GetProcessHeap () returned 0xae0000 [0119.532] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x40) returned 0xaf2218 [0119.532] GetProcessHeap () returned 0xae0000 [0119.532] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x3a) returned 0xaf2608 [0119.532] GetProcessHeap () returned 0xae0000 [0119.532] RtlReAllocateHeap (Heap=0xae0000, Flags=0x0, Ptr=0xaf2608, Size=0x72) returned 0x34726d0 [0119.532] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2a4 [0119.533] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0x0) returned 0x102 [0119.533] CloseHandle (hObject=0x2a4) returned 1 [0119.533] GetProcessHeap () returned 0xae0000 [0119.533] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf2218 | out: hHeap=0xae0000) returned 1 [0119.533] GetProcessHeap () returned 0xae0000 [0119.533] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34726d0 | out: hHeap=0xae0000) returned 1 [0119.533] Sleep (dwMilliseconds=0x3e8) [0120.949] GetProcessHeap () returned 0xae0000 [0120.949] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x20) returned 0xb083e8 [0120.949] GetProcessHeap () returned 0xae0000 [0120.950] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x1e) returned 0xb07f10 [0120.950] GetProcessHeap () returned 0xae0000 [0120.950] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x1e) returned 0xb081b8 [0120.950] GetProcessHeap () returned 0xae0000 [0120.950] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x90) returned 0x34859d8 [0120.950] GetProcessHeap () returned 0xae0000 [0120.950] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34859d8 | out: hHeap=0xae0000) returned 1 [0120.950] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xb07f10, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0120.950] GetProcessHeap () returned 0xae0000 [0120.950] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb081b8 | out: hHeap=0xae0000) returned 1 [0120.950] GetProcessHeap () returned 0xae0000 [0120.950] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb083e8 | out: hHeap=0xae0000) returned 1 [0120.950] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x24afae8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x24afae8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0120.951] GetProcessHeap () returned 0xae0000 [0120.953] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07f10 | out: hHeap=0xae0000) returned 1 [0120.953] GetProcessHeap () returned 0xae0000 [0120.953] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x40) returned 0xaf2728 [0120.953] GetProcessHeap () returned 0xae0000 [0120.953] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x3a) returned 0xaf2770 [0120.954] GetProcessHeap () returned 0xae0000 [0120.954] RtlReAllocateHeap (Heap=0xae0000, Flags=0x0, Ptr=0xaf2770, Size=0x72) returned 0x3472e50 [0120.954] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x314 [0120.954] WaitForSingleObject (hHandle=0x314, dwMilliseconds=0x0) returned 0x102 [0120.954] CloseHandle (hObject=0x314) returned 1 [0120.954] GetProcessHeap () returned 0xae0000 [0120.954] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf2728 | out: hHeap=0xae0000) returned 1 [0120.955] GetProcessHeap () returned 0xae0000 [0120.955] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3472e50 | out: hHeap=0xae0000) returned 1 [0120.955] Sleep (dwMilliseconds=0x3e8) [0122.377] GetProcessHeap () returned 0xae0000 [0122.377] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x20) returned 0xb08118 [0122.377] GetProcessHeap () returned 0xae0000 [0122.377] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x1e) returned 0xb083e8 [0122.378] GetProcessHeap () returned 0xae0000 [0122.378] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x1e) returned 0xb080f0 [0122.378] GetProcessHeap () returned 0xae0000 [0122.378] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x90) returned 0x3485cd0 [0122.378] GetProcessHeap () returned 0xae0000 [0122.378] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3485cd0 | out: hHeap=0xae0000) returned 1 [0122.378] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xb083e8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0122.378] GetProcessHeap () returned 0xae0000 [0122.378] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb080f0 | out: hHeap=0xae0000) returned 1 [0122.378] GetProcessHeap () returned 0xae0000 [0122.378] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb08118 | out: hHeap=0xae0000) returned 1 [0122.378] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x24afae8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x24afae8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0122.379] GetProcessHeap () returned 0xae0000 [0122.379] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb083e8 | out: hHeap=0xae0000) returned 1 [0122.379] GetProcessHeap () returned 0xae0000 [0122.379] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x40) returned 0xaf2848 [0122.379] GetProcessHeap () returned 0xae0000 [0122.379] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x3a) returned 0xaf2728 [0122.379] GetProcessHeap () returned 0xae0000 [0122.379] RtlReAllocateHeap (Heap=0xae0000, Flags=0x0, Ptr=0xaf2728, Size=0x72) returned 0x3472c50 [0122.379] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x314 [0122.380] WaitForSingleObject (hHandle=0x314, dwMilliseconds=0x0) returned 0x102 [0122.380] CloseHandle (hObject=0x314) returned 1 [0122.380] GetProcessHeap () returned 0xae0000 [0122.380] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf2848 | out: hHeap=0xae0000) returned 1 [0122.380] GetProcessHeap () returned 0xae0000 [0122.380] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3472c50 | out: hHeap=0xae0000) returned 1 [0122.380] Sleep (dwMilliseconds=0x3e8) [0123.820] GetProcessHeap () returned 0xae0000 [0123.820] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x20) returned 0xb07fb0 [0123.820] GetProcessHeap () returned 0xae0000 [0123.821] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x1e) returned 0xb07f38 [0123.821] GetProcessHeap () returned 0xae0000 [0123.821] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x1e) returned 0xb083e8 [0123.821] GetProcessHeap () returned 0xae0000 [0123.821] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x90) returned 0x3485fc8 [0123.821] GetProcessHeap () returned 0xae0000 [0123.821] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3485fc8 | out: hHeap=0xae0000) returned 1 [0123.821] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xb07f38, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0123.821] GetProcessHeap () returned 0xae0000 [0123.821] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb083e8 | out: hHeap=0xae0000) returned 1 [0123.821] GetProcessHeap () returned 0xae0000 [0123.821] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07fb0 | out: hHeap=0xae0000) returned 1 [0123.822] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x24afae8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x24afae8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0123.822] GetProcessHeap () returned 0xae0000 [0123.822] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07f38 | out: hHeap=0xae0000) returned 1 [0123.822] GetProcessHeap () returned 0xae0000 [0123.822] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x40) returned 0xaf2608 [0123.823] GetProcessHeap () returned 0xae0000 [0123.823] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x3a) returned 0xaf2728 [0123.823] GetProcessHeap () returned 0xae0000 [0123.823] RtlReAllocateHeap (Heap=0xae0000, Flags=0x0, Ptr=0xaf2728, Size=0x72) returned 0x3472d50 [0123.823] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2f0 [0123.823] WaitForSingleObject (hHandle=0x2f0, dwMilliseconds=0x0) returned 0x102 [0123.823] CloseHandle (hObject=0x2f0) returned 1 [0123.823] GetProcessHeap () returned 0xae0000 [0123.824] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf2608 | out: hHeap=0xae0000) returned 1 [0123.824] GetProcessHeap () returned 0xae0000 [0123.824] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3472d50 | out: hHeap=0xae0000) returned 1 [0123.824] Sleep (dwMilliseconds=0x3e8) [0125.140] GetProcessHeap () returned 0xae0000 [0125.140] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x20) returned 0xb081b8 [0125.140] GetProcessHeap () returned 0xae0000 [0125.140] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x1e) returned 0xb07f88 [0125.140] GetProcessHeap () returned 0xae0000 [0125.140] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x1e) returned 0xb082a8 [0125.140] GetProcessHeap () returned 0xae0000 [0125.140] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x90) returned 0x34859d8 [0125.141] GetProcessHeap () returned 0xae0000 [0125.141] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34859d8 | out: hHeap=0xae0000) returned 1 [0125.141] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xb07f88, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0125.141] GetProcessHeap () returned 0xae0000 [0125.141] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb082a8 | out: hHeap=0xae0000) returned 1 [0125.141] GetProcessHeap () returned 0xae0000 [0125.141] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb081b8 | out: hHeap=0xae0000) returned 1 [0125.141] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x24afae8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x24afae8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0125.143] GetProcessHeap () returned 0xae0000 [0125.143] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07f88 | out: hHeap=0xae0000) returned 1 [0125.143] GetProcessHeap () returned 0xae0000 [0125.143] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x40) returned 0xaf2728 [0125.144] GetProcessHeap () returned 0xae0000 [0125.144] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x3a) returned 0xaf2608 [0125.144] GetProcessHeap () returned 0xae0000 [0125.144] RtlReAllocateHeap (Heap=0xae0000, Flags=0x0, Ptr=0xaf2608, Size=0x72) returned 0x3472ed0 [0125.144] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x320 [0125.144] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x0) returned 0x102 [0125.145] CloseHandle (hObject=0x320) returned 1 [0125.145] GetProcessHeap () returned 0xae0000 [0125.145] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf2728 | out: hHeap=0xae0000) returned 1 [0125.145] GetProcessHeap () returned 0xae0000 [0125.145] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3472ed0 | out: hHeap=0xae0000) returned 1 [0125.145] Sleep (dwMilliseconds=0x3e8) [0126.560] GetProcessHeap () returned 0xae0000 [0126.560] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x20) returned 0xb07f88 [0126.561] GetProcessHeap () returned 0xae0000 [0126.561] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x1e) returned 0xb081b8 [0126.561] GetProcessHeap () returned 0xae0000 [0126.561] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x1e) returned 0xb08258 [0126.561] GetProcessHeap () returned 0xae0000 [0126.561] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x90) returned 0x3485188 [0126.561] GetProcessHeap () returned 0xae0000 [0126.561] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3485188 | out: hHeap=0xae0000) returned 1 [0126.561] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xb081b8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0126.561] GetProcessHeap () returned 0xae0000 [0126.561] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb08258 | out: hHeap=0xae0000) returned 1 [0126.561] GetProcessHeap () returned 0xae0000 [0126.561] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07f88 | out: hHeap=0xae0000) returned 1 [0126.561] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x24afae8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x24afae8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0126.562] GetProcessHeap () returned 0xae0000 [0126.562] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb081b8 | out: hHeap=0xae0000) returned 1 [0126.562] GetProcessHeap () returned 0xae0000 [0126.562] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x40) returned 0xaf2770 [0126.562] GetProcessHeap () returned 0xae0000 [0126.562] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x3a) returned 0xaf2608 [0126.562] GetProcessHeap () returned 0xae0000 [0126.562] RtlReAllocateHeap (Heap=0xae0000, Flags=0x0, Ptr=0xaf2608, Size=0x72) returned 0x3472ad0 [0126.562] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x308 [0126.563] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x0) returned 0x102 [0126.563] CloseHandle (hObject=0x308) returned 1 [0126.563] GetProcessHeap () returned 0xae0000 [0126.563] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf2770 | out: hHeap=0xae0000) returned 1 [0126.563] GetProcessHeap () returned 0xae0000 [0126.563] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3472ad0 | out: hHeap=0xae0000) returned 1 [0126.563] Sleep (dwMilliseconds=0x3e8) [0130.397] GetProcessHeap () returned 0xae0000 [0130.397] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x20) returned 0xb083e8 [0130.397] GetProcessHeap () returned 0xae0000 [0130.397] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x1e) returned 0xb08140 [0130.397] GetProcessHeap () returned 0xae0000 [0130.397] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x1e) returned 0xb07f10 [0130.397] GetProcessHeap () returned 0xae0000 [0130.397] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x90) returned 0x3485f30 [0130.397] GetProcessHeap () returned 0xae0000 [0130.397] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3485f30 | out: hHeap=0xae0000) returned 1 [0130.398] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xb08140, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0130.398] GetProcessHeap () returned 0xae0000 [0130.398] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07f10 | out: hHeap=0xae0000) returned 1 [0130.398] GetProcessHeap () returned 0xae0000 [0130.398] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb083e8 | out: hHeap=0xae0000) returned 1 [0130.398] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x24afae8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x24afae8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0130.398] GetProcessHeap () returned 0xae0000 [0130.398] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb08140 | out: hHeap=0xae0000) returned 1 [0130.398] GetProcessHeap () returned 0xae0000 [0130.399] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x40) returned 0xaf2800 [0130.399] GetProcessHeap () returned 0xae0000 [0130.399] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x3a) returned 0xaf2218 [0130.399] GetProcessHeap () returned 0xae0000 [0130.399] RtlReAllocateHeap (Heap=0xae0000, Flags=0x0, Ptr=0xaf2218, Size=0x72) returned 0x34725d0 [0130.399] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2f4 [0130.399] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0x0) returned 0x102 [0130.399] CloseHandle (hObject=0x2f4) returned 1 [0130.400] GetProcessHeap () returned 0xae0000 [0130.400] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf2800 | out: hHeap=0xae0000) returned 1 [0130.400] GetProcessHeap () returned 0xae0000 [0130.400] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34725d0 | out: hHeap=0xae0000) returned 1 [0130.400] Sleep (dwMilliseconds=0x3e8) [0131.960] GetProcessHeap () returned 0xae0000 [0131.960] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x20) returned 0xb07fd8 [0131.960] GetProcessHeap () returned 0xae0000 [0131.960] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x1e) returned 0xb080f0 [0131.960] GetProcessHeap () returned 0xae0000 [0131.960] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x1e) returned 0xb083e8 [0131.960] GetProcessHeap () returned 0xae0000 [0131.960] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x90) returned 0x3485778 [0131.960] GetProcessHeap () returned 0xae0000 [0131.960] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3485778 | out: hHeap=0xae0000) returned 1 [0131.961] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xb080f0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0131.961] GetProcessHeap () returned 0xae0000 [0131.961] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb083e8 | out: hHeap=0xae0000) returned 1 [0131.961] GetProcessHeap () returned 0xae0000 [0131.961] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07fd8 | out: hHeap=0xae0000) returned 1 [0131.961] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x24afae8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x24afae8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0131.961] GetProcessHeap () returned 0xae0000 [0131.961] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb080f0 | out: hHeap=0xae0000) returned 1 [0131.961] GetProcessHeap () returned 0xae0000 [0131.962] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x40) returned 0xaf2260 [0131.962] GetProcessHeap () returned 0xae0000 [0131.962] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x3a) returned 0xaf2578 [0131.962] GetProcessHeap () returned 0xae0000 [0131.962] RtlReAllocateHeap (Heap=0xae0000, Flags=0x0, Ptr=0xaf2578, Size=0x72) returned 0x3472950 [0131.962] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x338 [0131.962] WaitForSingleObject (hHandle=0x338, dwMilliseconds=0x0) returned 0x102 [0131.962] CloseHandle (hObject=0x338) returned 1 [0131.962] GetProcessHeap () returned 0xae0000 [0131.962] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf2260 | out: hHeap=0xae0000) returned 1 [0131.962] GetProcessHeap () returned 0xae0000 [0131.962] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3472950 | out: hHeap=0xae0000) returned 1 [0131.963] Sleep (dwMilliseconds=0x3e8) [0133.407] GetProcessHeap () returned 0xae0000 [0133.407] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x20) returned 0xb082d0 [0133.407] GetProcessHeap () returned 0xae0000 [0133.418] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x1e) returned 0xb083e8 [0133.418] GetProcessHeap () returned 0xae0000 [0133.418] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x1e) returned 0xb07f88 [0133.418] GetProcessHeap () returned 0xae0000 [0133.419] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x90) returned 0x3485778 [0133.419] GetProcessHeap () returned 0xae0000 [0133.419] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3485778 | out: hHeap=0xae0000) returned 1 [0133.419] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xb083e8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0133.419] GetProcessHeap () returned 0xae0000 [0133.419] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07f88 | out: hHeap=0xae0000) returned 1 [0133.419] GetProcessHeap () returned 0xae0000 [0133.419] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb082d0 | out: hHeap=0xae0000) returned 1 [0133.419] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x24afae8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x24afae8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0133.420] GetProcessHeap () returned 0xae0000 [0133.420] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb083e8 | out: hHeap=0xae0000) returned 1 [0133.420] GetProcessHeap () returned 0xae0000 [0133.420] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x40) returned 0xaf26e0 [0133.420] GetProcessHeap () returned 0xae0000 [0133.420] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x3a) returned 0xaf2578 [0133.420] GetProcessHeap () returned 0xae0000 [0133.420] RtlReAllocateHeap (Heap=0xae0000, Flags=0x0, Ptr=0xaf2578, Size=0x72) returned 0x34728d0 [0133.420] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x334 [0133.421] WaitForSingleObject (hHandle=0x334, dwMilliseconds=0x0) returned 0x102 [0133.421] CloseHandle (hObject=0x334) returned 1 [0133.421] GetProcessHeap () returned 0xae0000 [0133.421] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf26e0 | out: hHeap=0xae0000) returned 1 [0133.421] GetProcessHeap () returned 0xae0000 [0133.421] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34728d0 | out: hHeap=0xae0000) returned 1 [0133.422] Sleep (dwMilliseconds=0x3e8) [0134.894] GetProcessHeap () returned 0xae0000 [0134.894] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x20) returned 0xb08140 [0134.894] GetProcessHeap () returned 0xae0000 [0134.894] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x1e) returned 0xb083e8 [0134.894] GetProcessHeap () returned 0xae0000 [0134.894] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x1e) returned 0xb07f88 [0134.894] GetProcessHeap () returned 0xae0000 [0134.894] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x90) returned 0x3485220 [0134.895] GetProcessHeap () returned 0xae0000 [0134.895] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3485220 | out: hHeap=0xae0000) returned 1 [0134.895] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xb083e8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0134.895] GetProcessHeap () returned 0xae0000 [0134.895] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07f88 | out: hHeap=0xae0000) returned 1 [0134.895] GetProcessHeap () returned 0xae0000 [0134.895] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb08140 | out: hHeap=0xae0000) returned 1 [0134.895] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x24afae8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x24afae8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0134.896] GetProcessHeap () returned 0xae0000 [0134.896] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb083e8 | out: hHeap=0xae0000) returned 1 [0134.896] GetProcessHeap () returned 0xae0000 [0134.896] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x40) returned 0xaf2218 [0134.896] GetProcessHeap () returned 0xae0000 [0134.896] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x3a) returned 0xaf2578 [0134.896] GetProcessHeap () returned 0xae0000 [0134.896] RtlReAllocateHeap (Heap=0xae0000, Flags=0x0, Ptr=0xaf2578, Size=0x72) returned 0x3472750 [0134.896] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x318 [0134.896] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x0) returned 0x102 [0134.897] CloseHandle (hObject=0x318) returned 1 [0134.897] GetProcessHeap () returned 0xae0000 [0134.897] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf2218 | out: hHeap=0xae0000) returned 1 [0134.897] GetProcessHeap () returned 0xae0000 [0134.897] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3472750 | out: hHeap=0xae0000) returned 1 [0134.897] Sleep (dwMilliseconds=0x3e8) [0136.323] GetProcessHeap () returned 0xae0000 [0136.323] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x20) returned 0xb08168 [0136.323] GetProcessHeap () returned 0xae0000 [0136.323] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x1e) returned 0xb08190 [0136.323] GetProcessHeap () returned 0xae0000 [0136.323] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x1e) returned 0xb082d0 [0136.323] GetProcessHeap () returned 0xae0000 [0136.323] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x90) returned 0x3485e98 [0136.323] GetProcessHeap () returned 0xae0000 [0136.324] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3485e98 | out: hHeap=0xae0000) returned 1 [0136.324] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xb08190, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0136.324] GetProcessHeap () returned 0xae0000 [0136.324] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb082d0 | out: hHeap=0xae0000) returned 1 [0136.324] GetProcessHeap () returned 0xae0000 [0136.324] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb08168 | out: hHeap=0xae0000) returned 1 [0136.324] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x24afae8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x24afae8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0136.325] GetProcessHeap () returned 0xae0000 [0136.325] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb08190 | out: hHeap=0xae0000) returned 1 [0136.325] GetProcessHeap () returned 0xae0000 [0136.325] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x40) returned 0xaf26e0 [0136.325] GetProcessHeap () returned 0xae0000 [0136.325] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x3a) returned 0xaf2578 [0136.325] GetProcessHeap () returned 0xae0000 [0136.325] RtlReAllocateHeap (Heap=0xae0000, Flags=0x0, Ptr=0xaf2578, Size=0x72) returned 0x3472cd0 [0136.325] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x334 [0136.325] WaitForSingleObject (hHandle=0x334, dwMilliseconds=0x0) returned 0x102 [0136.325] CloseHandle (hObject=0x334) returned 1 [0136.325] GetProcessHeap () returned 0xae0000 [0136.326] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf26e0 | out: hHeap=0xae0000) returned 1 [0136.326] GetProcessHeap () returned 0xae0000 [0136.326] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3472cd0 | out: hHeap=0xae0000) returned 1 [0136.326] Sleep (dwMilliseconds=0x3e8) Thread: id = 17 os_tid = 0xdf4 [0111.490] GetProcessHeap () returned 0xae0000 [0111.490] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x440) returned 0xb0dc78 [0111.490] GetProcessHeap () returned 0xae0000 [0111.490] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x434) returned 0xb0e0c0 [0111.491] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2a4 [0112.777] Process32FirstW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0112.778] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0112.780] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0112.781] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0112.783] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0112.784] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0112.786] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0112.787] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0112.789] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0112.790] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0112.792] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0112.794] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0112.795] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0112.797] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0112.798] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x57, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0112.800] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0112.801] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0112.803] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0112.804] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0112.806] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0112.966] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0112.968] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0112.970] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0112.971] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0112.973] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0112.975] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0112.976] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0112.978] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0112.986] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0112.987] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0112.989] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0112.990] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0112.991] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0112.993] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0112.994] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0112.996] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0112.997] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0112.999] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0113.000] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0113.002] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0113.003] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0113.005] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0113.006] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xffc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0113.008] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0113.009] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0113.280] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x384, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="screensaverfireplace.exe")) returned 1 [0113.282] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="edge.exe")) returned 1 [0113.283] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="survivors-sets.exe")) returned 1 [0113.285] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="downloadable-surveillance-governments.exe")) returned 1 [0113.286] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="ictslave.exe")) returned 1 [0113.288] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="campusrank.exe")) returned 1 [0113.289] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="circus.exe")) returned 1 [0113.291] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x654, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="swap dame looked.exe")) returned 1 [0113.365] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="alliedtasks.exe")) returned 1 [0113.366] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="antonio.exe")) returned 1 [0113.368] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="volkswagen.exe")) returned 1 [0113.370] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0113.372] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xfe0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0113.373] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdcc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="charity.exe")) returned 1 [0113.375] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x668, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xffc, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0113.377] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="forming.exe")) returned 1 [0113.379] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="disagree.exe")) returned 1 [0113.381] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="fame lightning.exe")) returned 1 [0113.383] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="feed-canada-lamps.exe")) returned 1 [0113.623] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="click-charter-thinking.exe")) returned 1 [0113.625] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="evaluations favor end.exe")) returned 1 [0113.628] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="households-lonely-advantage.exe")) returned 1 [0113.630] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x910, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="emotions_urban.exe")) returned 1 [0113.632] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0113.633] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x504, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x2e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0113.636] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="TrustedInstaller.exe")) returned 1 [0113.638] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0113.640] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="AntiRecuvaAndDB.exe")) returned 1 [0113.641] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xf9c, pcPriClassBase=8, dwFlags=0x0, szExeFile="AntiRecuvaAndDB.exe")) returned 1 [0113.643] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0113.645] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xf9c, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0113.646] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdc4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0113.648] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdc4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0 [0113.649] CloseHandle (hObject=0x2a4) returned 1 [0113.650] Sleep (dwMilliseconds=0x1f4) [0114.917] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2a4 [0114.935] Process32FirstW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0114.937] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0114.938] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0114.940] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0114.941] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0114.942] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0114.944] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0114.946] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0114.947] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0114.948] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.950] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0114.951] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0114.952] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.954] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0114.956] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x57, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.957] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0114.959] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.380] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.381] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.383] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.385] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.386] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.387] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.389] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0115.390] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.391] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.393] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0115.394] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0115.396] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0115.397] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0115.398] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0115.400] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0115.401] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0115.402] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0115.404] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0115.405] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0115.406] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0115.408] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0115.409] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0115.411] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0115.412] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0115.854] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0115.856] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xffc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0115.858] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0115.859] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0115.861] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x384, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="screensaverfireplace.exe")) returned 1 [0115.862] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="edge.exe")) returned 1 [0115.864] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="survivors-sets.exe")) returned 1 [0115.865] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="downloadable-surveillance-governments.exe")) returned 1 [0115.868] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="ictslave.exe")) returned 1 [0115.869] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="campusrank.exe")) returned 1 [0115.871] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="circus.exe")) returned 1 [0115.872] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x654, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="swap dame looked.exe")) returned 1 [0115.874] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="alliedtasks.exe")) returned 1 [0115.875] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="antonio.exe")) returned 1 [0115.877] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="volkswagen.exe")) returned 1 [0115.879] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0115.880] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xfe0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0115.883] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdcc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="charity.exe")) returned 1 [0115.885] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x668, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xffc, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0115.886] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="forming.exe")) returned 1 [0115.888] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="disagree.exe")) returned 1 [0115.890] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="fame lightning.exe")) returned 1 [0115.892] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="feed-canada-lamps.exe")) returned 1 [0115.894] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="click-charter-thinking.exe")) returned 1 [0115.895] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="evaluations favor end.exe")) returned 1 [0116.274] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="households-lonely-advantage.exe")) returned 1 [0116.276] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x910, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="emotions_urban.exe")) returned 1 [0116.278] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0116.279] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x504, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x2e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0116.281] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="TrustedInstaller.exe")) returned 1 [0116.283] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0116.284] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="AntiRecuvaAndDB.exe")) returned 1 [0116.286] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xf9c, pcPriClassBase=8, dwFlags=0x0, szExeFile="AntiRecuvaAndDB.exe")) returned 1 [0116.288] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0116.290] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xf9c, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0116.292] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdc4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0116.293] Process32NextW (in: hSnapshot=0x2a4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdc4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0 [0116.295] CloseHandle (hObject=0x2a4) returned 1 [0116.295] Sleep (dwMilliseconds=0x1f4) [0117.179] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x318 [0117.205] Process32FirstW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0117.207] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0117.209] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0117.211] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0117.212] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0117.214] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0117.215] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0117.216] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0117.217] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0117.219] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.220] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0117.221] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0117.223] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.224] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0117.995] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x54, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.996] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.998] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.999] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.001] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.002] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.003] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.005] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.006] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.008] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0118.010] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.011] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.012] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0118.014] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0118.015] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.017] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0118.018] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0118.019] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0118.021] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0118.022] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0118.024] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0118.025] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0118.026] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0118.028] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0118.029] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0118.031] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0118.032] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0118.033] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0118.035] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xffc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0118.036] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0118.038] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0118.477] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x384, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="screensaverfireplace.exe")) returned 1 [0118.479] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="edge.exe")) returned 1 [0118.480] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="survivors-sets.exe")) returned 1 [0118.482] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="downloadable-surveillance-governments.exe")) returned 1 [0118.483] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="ictslave.exe")) returned 1 [0118.484] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="campusrank.exe")) returned 1 [0118.486] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="circus.exe")) returned 1 [0118.487] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x654, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="swap dame looked.exe")) returned 1 [0118.489] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="alliedtasks.exe")) returned 1 [0118.490] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="antonio.exe")) returned 1 [0118.492] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="volkswagen.exe")) returned 1 [0118.494] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0118.495] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xfe0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0118.496] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdcc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="charity.exe")) returned 1 [0118.498] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x668, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xffc, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0118.500] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="forming.exe")) returned 1 [0118.502] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="disagree.exe")) returned 1 [0118.504] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="fame lightning.exe")) returned 1 [0118.506] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="feed-canada-lamps.exe")) returned 1 [0118.508] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="click-charter-thinking.exe")) returned 1 [0118.510] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="evaluations favor end.exe")) returned 1 [0118.512] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="households-lonely-advantage.exe")) returned 1 [0118.514] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x910, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="emotions_urban.exe")) returned 1 [0118.516] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0118.517] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x504, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x2e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0118.519] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="TrustedInstaller.exe")) returned 1 [0118.521] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0119.085] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="AntiRecuvaAndDB.exe")) returned 1 [0119.087] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xf9c, pcPriClassBase=8, dwFlags=0x0, szExeFile="AntiRecuvaAndDB.exe")) returned 1 [0119.089] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0119.091] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xf9c, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0119.092] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xdc4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0119.094] Process32NextW (in: hSnapshot=0x318, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xdc4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0 [0119.095] CloseHandle (hObject=0x318) returned 1 [0119.095] Sleep (dwMilliseconds=0x1f4) [0119.771] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x310 [0119.806] Process32FirstW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0119.808] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0119.809] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0119.810] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0119.812] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0119.813] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0120.173] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0120.175] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0120.177] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0120.178] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.180] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0120.181] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0120.182] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.184] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0120.185] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x54, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.187] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.188] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.190] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.191] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.192] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.194] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.195] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.197] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.198] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0120.199] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.201] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.202] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0120.204] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0120.722] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0120.724] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0120.725] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0120.727] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0120.728] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0120.730] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0120.731] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0120.733] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0120.734] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0120.738] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0120.739] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0120.741] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0120.742] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0120.744] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0120.745] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xffc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0120.746] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0120.748] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0120.749] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x384, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="screensaverfireplace.exe")) returned 1 [0120.751] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="edge.exe")) returned 1 [0120.752] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="survivors-sets.exe")) returned 1 [0120.754] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="downloadable-surveillance-governments.exe")) returned 1 [0120.755] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="ictslave.exe")) returned 1 [0120.756] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="campusrank.exe")) returned 1 [0120.758] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="circus.exe")) returned 1 [0120.759] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x654, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="swap dame looked.exe")) returned 1 [0120.760] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="alliedtasks.exe")) returned 1 [0120.762] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="antonio.exe")) returned 1 [0120.763] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="volkswagen.exe")) returned 1 [0120.765] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0120.766] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xfe0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0120.966] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdcc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="charity.exe")) returned 1 [0121.006] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x668, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xffc, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0121.008] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="forming.exe")) returned 1 [0121.010] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="disagree.exe")) returned 1 [0121.012] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="fame lightning.exe")) returned 1 [0121.014] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="feed-canada-lamps.exe")) returned 1 [0121.016] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="click-charter-thinking.exe")) returned 1 [0121.019] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="evaluations favor end.exe")) returned 1 [0121.020] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="households-lonely-advantage.exe")) returned 1 [0121.022] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x910, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="emotions_urban.exe")) returned 1 [0121.024] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0121.026] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x504, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x2e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0121.027] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="TrustedInstaller.exe")) returned 1 [0121.029] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0121.031] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="AntiRecuvaAndDB.exe")) returned 1 [0121.033] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xf9c, pcPriClassBase=8, dwFlags=0x0, szExeFile="AntiRecuvaAndDB.exe")) returned 1 [0121.034] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0121.036] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xf9c, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0121.037] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xdc4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0121.039] Process32NextW (in: hSnapshot=0x310, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xdc4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0 [0121.040] CloseHandle (hObject=0x310) returned 1 [0121.041] Sleep (dwMilliseconds=0x1f4) [0121.814] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x308 [0121.843] Process32FirstW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0121.848] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0121.850] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0121.851] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0121.852] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0121.854] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0121.855] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0121.857] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0121.858] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0121.859] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.195] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0122.197] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0122.198] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.200] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0122.201] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x54, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.202] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.204] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.207] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.208] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.210] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.211] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.212] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.214] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.215] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0122.217] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.218] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.219] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0122.223] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0122.224] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0122.226] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0122.227] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0122.229] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0122.230] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0122.231] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0122.233] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0122.234] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0122.549] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0122.550] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0122.552] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0122.553] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0122.554] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0122.556] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0122.557] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xffc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0122.558] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0122.560] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0122.561] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x384, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="screensaverfireplace.exe")) returned 1 [0122.563] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="edge.exe")) returned 1 [0122.565] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="survivors-sets.exe")) returned 1 [0122.566] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="downloadable-surveillance-governments.exe")) returned 1 [0122.568] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="ictslave.exe")) returned 1 [0122.569] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="campusrank.exe")) returned 1 [0122.571] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="circus.exe")) returned 1 [0122.572] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x654, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="swap dame looked.exe")) returned 1 [0122.573] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="alliedtasks.exe")) returned 1 [0122.575] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="antonio.exe")) returned 1 [0122.576] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="volkswagen.exe")) returned 1 [0122.578] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0122.580] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xfe0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0122.582] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdcc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="charity.exe")) returned 1 [0122.584] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x668, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xffc, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0122.586] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="forming.exe")) returned 1 [0122.588] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="disagree.exe")) returned 1 [0122.590] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="fame lightning.exe")) returned 1 [0122.592] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="feed-canada-lamps.exe")) returned 1 [0122.594] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="click-charter-thinking.exe")) returned 1 [0123.349] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="evaluations favor end.exe")) returned 1 [0123.351] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="households-lonely-advantage.exe")) returned 1 [0123.353] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x910, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="emotions_urban.exe")) returned 1 [0123.354] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0123.356] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x504, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x2e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0123.358] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="TrustedInstaller.exe")) returned 1 [0123.359] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0123.363] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="AntiRecuvaAndDB.exe")) returned 1 [0123.365] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xf9c, pcPriClassBase=8, dwFlags=0x0, szExeFile="AntiRecuvaAndDB.exe")) returned 1 [0123.366] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0123.368] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xf9c, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0123.370] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xdc4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0123.371] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xdc4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0 [0123.373] CloseHandle (hObject=0x308) returned 1 [0123.374] Sleep (dwMilliseconds=0x1f4) [0124.169] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x308 [0124.194] Process32FirstW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0124.195] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0124.197] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0124.198] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0124.199] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0124.201] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0124.202] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0124.204] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0124.518] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0124.520] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.522] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0124.523] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0124.524] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.526] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0124.529] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x53, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.531] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.532] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.533] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.535] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.536] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.537] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.539] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.540] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.541] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0124.544] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.545] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.546] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0124.548] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0124.549] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0124.551] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0124.552] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0124.553] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0124.555] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0124.556] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0124.558] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0124.795] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0124.797] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0124.798] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0124.799] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0124.801] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0124.802] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0124.804] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0124.805] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xffc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0124.806] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0124.808] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0124.810] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x384, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="screensaverfireplace.exe")) returned 1 [0124.812] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="edge.exe")) returned 1 [0124.813] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="survivors-sets.exe")) returned 1 [0124.815] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="downloadable-surveillance-governments.exe")) returned 1 [0124.816] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="ictslave.exe")) returned 1 [0124.818] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="campusrank.exe")) returned 1 [0124.819] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="circus.exe")) returned 1 [0124.820] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x654, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="swap dame looked.exe")) returned 1 [0124.822] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="alliedtasks.exe")) returned 1 [0124.823] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="antonio.exe")) returned 1 [0124.825] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="volkswagen.exe")) returned 1 [0124.826] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0124.828] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xfe0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0124.829] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdcc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="charity.exe")) returned 1 [0124.831] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x668, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xffc, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0124.833] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="forming.exe")) returned 1 [0124.835] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="disagree.exe")) returned 1 [0124.837] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="fame lightning.exe")) returned 1 [0124.839] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="feed-canada-lamps.exe")) returned 1 [0125.147] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="click-charter-thinking.exe")) returned 1 [0125.149] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="evaluations favor end.exe")) returned 1 [0125.151] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="households-lonely-advantage.exe")) returned 1 [0125.153] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x910, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="emotions_urban.exe")) returned 1 [0125.155] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0125.157] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x504, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x2e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0125.159] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="TrustedInstaller.exe")) returned 1 [0125.160] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0125.162] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="AntiRecuvaAndDB.exe")) returned 1 [0125.164] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xf9c, pcPriClassBase=8, dwFlags=0x0, szExeFile="AntiRecuvaAndDB.exe")) returned 1 [0125.165] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0125.167] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xf9c, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0125.311] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xdc4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0125.313] Process32NextW (in: hSnapshot=0x308, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xdc4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0 [0125.314] CloseHandle (hObject=0x308) returned 1 [0125.315] Sleep (dwMilliseconds=0x1f4) [0126.075] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x31c [0126.093] Process32FirstW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0126.094] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0126.095] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0126.097] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0126.098] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0126.100] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0126.101] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0126.102] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0126.104] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0126.106] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0126.107] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0126.108] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0126.110] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0126.111] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0126.113] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x53, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0126.114] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0126.115] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0126.117] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0126.118] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0126.120] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0126.324] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0126.326] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0126.327] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0126.329] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0126.330] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0126.332] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0126.335] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0126.336] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0126.337] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0126.339] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0126.341] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0126.343] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0126.344] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0126.345] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0126.347] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0126.348] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0126.350] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0126.351] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0126.352] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0126.354] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0126.543] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0126.545] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0126.546] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xffc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0126.548] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0126.549] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0126.550] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x384, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="screensaverfireplace.exe")) returned 1 [0126.552] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="edge.exe")) returned 1 [0126.553] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="survivors-sets.exe")) returned 1 [0126.555] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="downloadable-surveillance-governments.exe")) returned 1 [0126.556] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="ictslave.exe")) returned 1 [0126.558] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="campusrank.exe")) returned 1 [0126.858] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="circus.exe")) returned 1 [0126.859] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x654, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="swap dame looked.exe")) returned 1 [0126.861] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="alliedtasks.exe")) returned 1 [0126.862] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="antonio.exe")) returned 1 [0126.863] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="volkswagen.exe")) returned 1 [0126.865] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0126.866] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xfe0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0126.868] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdcc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="charity.exe")) returned 1 [0126.869] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x668, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xffc, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0126.872] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="forming.exe")) returned 1 [0126.874] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="disagree.exe")) returned 1 [0126.876] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="fame lightning.exe")) returned 1 [0126.878] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="feed-canada-lamps.exe")) returned 1 [0126.880] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="click-charter-thinking.exe")) returned 1 [0126.882] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="evaluations favor end.exe")) returned 1 [0126.883] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="households-lonely-advantage.exe")) returned 1 [0126.885] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x910, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="emotions_urban.exe")) returned 1 [0126.887] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0126.889] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x504, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x2e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0126.891] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="TrustedInstaller.exe")) returned 1 [0126.892] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0126.894] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="AntiRecuvaAndDB.exe")) returned 1 [0126.896] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xf9c, pcPriClassBase=8, dwFlags=0x0, szExeFile="AntiRecuvaAndDB.exe")) returned 1 [0126.898] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0126.899] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xf9c, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0126.901] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xdc4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0126.903] Process32NextW (in: hSnapshot=0x31c, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xdc4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0 [0127.235] CloseHandle (hObject=0x31c) returned 1 [0127.236] Sleep (dwMilliseconds=0x1f4) [0130.424] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2f4 [0130.464] Process32FirstW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0130.964] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0130.966] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0130.968] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0130.969] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0130.970] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0130.972] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0130.973] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0130.975] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0130.976] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.977] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0130.979] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0130.980] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.982] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0130.983] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x53, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.985] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.986] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.987] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.989] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.990] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.991] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.993] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0130.994] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0131.465] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0131.467] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0131.468] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0131.469] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0131.471] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0131.473] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0131.474] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0131.475] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0131.477] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0131.478] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x41, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0131.479] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0131.482] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0131.483] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0131.485] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0131.486] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0131.487] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0131.489] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0131.490] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0131.491] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0131.493] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xffc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0131.494] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0131.537] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0131.539] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x384, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="screensaverfireplace.exe")) returned 1 [0131.540] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="edge.exe")) returned 1 [0131.542] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="survivors-sets.exe")) returned 1 [0132.077] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="downloadable-surveillance-governments.exe")) returned 1 [0132.078] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="ictslave.exe")) returned 1 [0132.080] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="campusrank.exe")) returned 1 [0132.081] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="circus.exe")) returned 1 [0132.082] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x654, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="swap dame looked.exe")) returned 1 [0132.084] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="alliedtasks.exe")) returned 1 [0132.085] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="antonio.exe")) returned 1 [0132.087] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="volkswagen.exe")) returned 1 [0132.088] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0132.090] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xfe0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0132.092] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdcc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="charity.exe")) returned 1 [0132.093] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x668, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xffc, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0132.095] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="forming.exe")) returned 1 [0132.097] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="disagree.exe")) returned 1 [0132.099] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="fame lightning.exe")) returned 1 [0132.101] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="feed-canada-lamps.exe")) returned 1 [0132.103] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="click-charter-thinking.exe")) returned 1 [0132.105] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="evaluations favor end.exe")) returned 1 [0132.107] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="households-lonely-advantage.exe")) returned 1 [0132.108] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x910, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="emotions_urban.exe")) returned 1 [0132.110] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0132.112] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x504, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x2e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0132.113] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="TrustedInstaller.exe")) returned 1 [0132.115] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0132.117] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="AntiRecuvaAndDB.exe")) returned 1 [0132.119] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xf9c, pcPriClassBase=8, dwFlags=0x0, szExeFile="AntiRecuvaAndDB.exe")) returned 1 [0132.120] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0132.122] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xf9c, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0133.052] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xdc4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0133.054] Process32NextW (in: hSnapshot=0x2f4, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xdc4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0 [0133.056] CloseHandle (hObject=0x2f4) returned 1 [0133.056] Sleep (dwMilliseconds=0x1f4) [0133.786] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x334 [0133.800] Process32FirstW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0133.801] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0133.802] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0133.804] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0133.805] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0133.807] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0133.818] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0133.820] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0133.821] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0133.822] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.824] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0133.826] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0133.827] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.829] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0133.830] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x55, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.831] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.833] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.834] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.836] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.837] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0133.838] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.172] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.173] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.175] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0134.176] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.178] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.179] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0134.180] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0134.182] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0134.183] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0134.185] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0134.186] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0134.187] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x40, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0134.189] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0134.190] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0134.192] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0134.193] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0134.194] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0134.196] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0134.197] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0134.199] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0134.201] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xffc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0134.203] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0134.204] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0134.205] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x384, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="screensaverfireplace.exe")) returned 1 [0134.207] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="edge.exe")) returned 1 [0134.208] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="survivors-sets.exe")) returned 1 [0134.210] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="downloadable-surveillance-governments.exe")) returned 1 [0134.211] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="ictslave.exe")) returned 1 [0134.213] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="campusrank.exe")) returned 1 [0134.214] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="circus.exe")) returned 1 [0134.596] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x654, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="swap dame looked.exe")) returned 1 [0134.597] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="alliedtasks.exe")) returned 1 [0134.599] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="antonio.exe")) returned 1 [0134.600] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="volkswagen.exe")) returned 1 [0134.602] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0134.603] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xfe0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0134.604] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdcc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="charity.exe")) returned 1 [0134.606] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x668, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xffc, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0134.608] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="forming.exe")) returned 1 [0134.610] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="disagree.exe")) returned 1 [0134.612] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="fame lightning.exe")) returned 1 [0134.614] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="feed-canada-lamps.exe")) returned 1 [0134.616] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="click-charter-thinking.exe")) returned 1 [0134.618] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="evaluations favor end.exe")) returned 1 [0134.619] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="households-lonely-advantage.exe")) returned 1 [0134.622] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x910, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="emotions_urban.exe")) returned 1 [0134.624] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0134.626] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x504, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x2e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0134.628] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="TrustedInstaller.exe")) returned 1 [0134.630] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0134.632] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="AntiRecuvaAndDB.exe")) returned 1 [0134.633] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xf9c, pcPriClassBase=8, dwFlags=0x0, szExeFile="AntiRecuvaAndDB.exe")) returned 1 [0134.635] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0134.992] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xf9c, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0134.996] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xdc4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0134.997] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xef4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 1 [0134.999] Process32NextW (in: hSnapshot=0x334, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xef4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 0 [0135.000] CloseHandle (hObject=0x334) returned 1 [0135.000] Sleep (dwMilliseconds=0x1f4) [0136.119] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x314 [0136.128] Process32FirstW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0136.129] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0136.131] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0136.132] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0136.133] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0136.135] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0136.136] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0136.138] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0136.139] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0136.141] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0136.142] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0136.143] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0136.145] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0136.146] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0136.148] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x59, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0136.149] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0136.151] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0136.152] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0136.154] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0136.155] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0136.157] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0136.158] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0136.159] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0136.161] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0136.162] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0136.163] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0136.482] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0136.483] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0136.485] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0136.486] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0136.487] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0136.489] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0136.490] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x40, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0136.492] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0136.494] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0136.495] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0136.496] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0136.498] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0136.499] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0136.500] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0136.502] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0136.503] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xffc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0136.504] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0136.506] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x384, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="screensaverfireplace.exe")) returned 1 [0136.507] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="edge.exe")) returned 1 [0136.509] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="survivors-sets.exe")) returned 1 [0136.511] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="downloadable-surveillance-governments.exe")) returned 1 [0136.512] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="ictslave.exe")) returned 1 [0136.514] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="campusrank.exe")) returned 1 [0136.515] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xce4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="circus.exe")) returned 1 [0136.516] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x654, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="swap dame looked.exe")) returned 1 [0136.518] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="alliedtasks.exe")) returned 1 [0136.519] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="antonio.exe")) returned 1 [0136.521] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="volkswagen.exe")) returned 1 [0136.522] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0136.523] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xfe0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0136.885] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdcc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="charity.exe")) returned 1 [0136.887] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x668, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xffc, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0136.888] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="forming.exe")) returned 1 [0136.890] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="disagree.exe")) returned 1 [0136.892] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="fame lightning.exe")) returned 1 [0136.894] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="feed-canada-lamps.exe")) returned 1 [0136.896] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="click-charter-thinking.exe")) returned 1 [0136.898] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="evaluations favor end.exe")) returned 1 [0136.900] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="households-lonely-advantage.exe")) returned 1 [0136.902] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x910, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="emotions_urban.exe")) returned 1 [0136.904] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0136.906] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x504, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x2e8, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0136.908] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="TrustedInstaller.exe")) returned 1 [0136.909] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0136.911] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="AntiRecuvaAndDB.exe")) returned 1 [0136.913] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0xf9c, pcPriClassBase=8, dwFlags=0x0, szExeFile="AntiRecuvaAndDB.exe")) returned 1 [0136.914] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0136.916] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xf9c, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0136.918] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xdc4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0136.919] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xef4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 1 [0136.921] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xdc4, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0136.922] Process32NextW (in: hSnapshot=0x314, lppe=0x25af804 | out: lppe=0x25af804*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xdc4, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 0 [0136.924] CloseHandle (hObject=0x314) returned 1 [0136.924] Sleep (dwMilliseconds=0x1f4) Thread: id = 18 os_tid = 0x388 [0111.528] GetProcessHeap () returned 0xae0000 [0111.528] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x21a) returned 0xb0ede0 [0111.528] GetProcessHeap () returned 0xae0000 [0111.528] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x28) returned 0xaf6de0 [0111.528] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2a8 [0111.529] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2ac [0111.529] GetComputerNameW (in: lpBuffer=0xb0edf0, nSize=0x26afa24 | out: lpBuffer="NQDPDE", nSize=0x26afa24) returned 1 [0111.529] GetProcessHeap () returned 0xae0000 [0111.529] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x20) returned 0xb08140 [0111.529] CloseHandle (hObject=0x2ac) returned 1 [0111.529] CloseHandle (hObject=0x2a8) returned 1 [0111.529] GetProcessHeap () returned 0xae0000 [0111.529] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf6de0 | out: hHeap=0xae0000) returned 1 [0111.530] GetProcessHeap () returned 0xae0000 [0111.530] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb08140 | out: hHeap=0xae0000) returned 1 [0111.530] GetProcessHeap () returned 0xae0000 [0111.530] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb0ede0 | out: hHeap=0xae0000) returned 1 Thread: id = 19 os_tid = 0x15c [0111.532] GetLogicalDrives () returned 0x4 [0111.532] GetProcessHeap () returned 0xae0000 [0111.532] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x40) returned 0xaf25c0 [0111.532] GetProcessHeap () returned 0xae0000 [0111.533] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x28) returned 0xaf6cc0 [0111.533] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2a8 [0111.533] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2ac [0111.533] GetProcessHeap () returned 0xae0000 [0111.533] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x20) returned 0xb07f88 [0111.533] GetProcessHeap () returned 0xae0000 [0111.533] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x1e) returned 0xb082f8 [0111.533] GetProcessHeap () returned 0xae0000 [0111.533] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x1e) returned 0xb08398 [0111.533] GetProcessHeap () returned 0xae0000 [0111.533] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x90) returned 0xaf10d8 [0111.533] GetProcessHeap () returned 0xae0000 [0111.533] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf10d8 | out: hHeap=0xae0000) returned 1 [0111.534] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xb082f8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0111.534] GetProcessHeap () returned 0xae0000 [0111.534] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb08398 | out: hHeap=0xae0000) returned 1 [0111.534] GetProcessHeap () returned 0xae0000 [0111.534] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07f88 | out: hHeap=0xae0000) returned 1 [0111.534] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x27ef8a4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x27ef8a4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0111.534] GetProcessHeap () returned 0xae0000 [0111.534] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb082f8 | out: hHeap=0xae0000) returned 1 [0111.535] GetProcessHeap () returned 0xae0000 [0111.535] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10) returned 0xb07c40 [0111.535] GetProcessHeap () returned 0xae0000 [0111.535] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10) returned 0xb07d00 [0111.535] GetProcessHeap () returned 0xae0000 [0111.535] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10) returned 0xb07c58 [0111.535] GetProcessHeap () returned 0xae0000 [0111.535] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x90) returned 0xaf10d8 [0111.535] GetProcessHeap () returned 0xae0000 [0111.535] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10) returned 0xb07c70 [0111.536] htonl (hostlong=0xb4197730) returned 0x307719b4 [0111.536] QueryPerformanceCounter (in: lpPerformanceCount=0x27ef7a0 | out: lpPerformanceCount=0x27ef7a0*=20228182329) returned 1 [0111.536] GetTickCount () returned 0x115be8a [0111.536] GetCurrentProcessId () returned 0xf9c [0111.536] GetCurrentThreadId () returned 0x15c [0111.536] GetLocalTime (in: lpSystemTime=0x27ef788 | out: lpSystemTime=0x27ef788*(wYear=0x7e4, wMonth=0x1, wDayOfWeek=0x3, wDay=0x1, wHour=0xc, wMinute=0x29, wSecond=0x9, wMilliseconds=0x231)) [0111.536] SystemTimeToFileTime (in: lpSystemTime=0x27ef788, lpFileTime=0x27ef798 | out: lpFileTime=0x27ef798) returned 1 [0111.537] QueryPerformanceCounter (in: lpPerformanceCount=0x27ef7a0 | out: lpPerformanceCount=0x27ef7a0*=20228243328) returned 1 [0111.537] GetProcessHeap () returned 0xae0000 [0111.537] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x28) returned 0xaf6d20 [0111.537] GetProcessHeap () returned 0xae0000 [0111.537] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10) returned 0xb07d30 [0111.537] GetProcessHeap () returned 0xae0000 [0111.537] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x4) returned 0xb08938 [0111.537] GetProcessHeap () returned 0xae0000 [0111.537] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x14) returned 0xaf8720 [0111.537] GetProcessHeap () returned 0xae0000 [0111.538] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10) returned 0xb07ca0 [0111.538] GetProcessHeap () returned 0xae0000 [0111.538] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x80) returned 0xae6718 [0111.538] GetProcessHeap () returned 0xae0000 [0111.538] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10) returned 0xb07b20 [0111.538] GetProcessHeap () returned 0xae0000 [0111.538] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x82) returned 0xaeff68 [0111.538] GetProcessHeap () returned 0xae0000 [0111.538] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10) returned 0xb07dc0 [0111.538] GetProcessHeap () returned 0xae0000 [0111.538] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x4) returned 0xb089a8 [0111.538] GetProcessHeap () returned 0xae0000 [0111.538] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10) returned 0xb07b38 [0111.539] GetProcessHeap () returned 0xae0000 [0111.539] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x80) returned 0xaefff8 [0111.539] GetProcessHeap () returned 0xae0000 [0111.539] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10) returned 0xb07e08 [0111.539] GetProcessHeap () returned 0xae0000 [0111.539] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x2) returned 0xb089d8 [0111.539] GetProcessHeap () returned 0xae0000 [0111.539] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x4) returned 0xb08928 [0111.539] GetProcessHeap () returned 0xae0000 [0111.539] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10) returned 0xb07ec8 [0111.539] GetProcessHeap () returned 0xae0000 [0111.539] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x80) returned 0xaf1238 [0111.539] GetProcessHeap () returned 0xae0000 [0111.539] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10) returned 0xb07e20 [0111.539] GetProcessHeap () returned 0xae0000 [0111.539] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x4) returned 0xb08a98 [0111.540] GetProcessHeap () returned 0xae0000 [0111.540] RtlReAllocateHeap (Heap=0xae0000, Flags=0x0, Ptr=0xb089d8, Size=0x82) returned 0xaf12c0 [0111.540] GetProcessHeap () returned 0xae0000 [0111.540] RtlReAllocateHeap (Heap=0xae0000, Flags=0x0, Ptr=0xb08a98, Size=0x100) returned 0xb093c8 [0111.540] GetProcessHeap () returned 0xae0000 [0111.540] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10) returned 0xb07e38 [0111.540] GetProcessHeap () returned 0xae0000 [0111.540] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x82) returned 0xafe388 [0111.540] GetProcessHeap () returned 0xae0000 [0111.540] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10) returned 0xb07e50 [0111.540] GetProcessHeap () returned 0xae0000 [0111.540] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x82) returned 0xafe418 [0111.540] GetProcessHeap () returned 0xae0000 [0111.540] RtlReAllocateHeap (Heap=0xae0000, Flags=0x0, Ptr=0xaf12c0, Size=0x104) returned 0xb0ede0 [0111.541] GetProcessHeap () returned 0xae0000 [0111.541] RtlReAllocateHeap (Heap=0xae0000, Flags=0x0, Ptr=0xb093c8, Size=0x200) returned 0xb0eef0 [0111.543] GetProcessHeap () returned 0xae0000 [0111.543] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb08928 | out: hHeap=0xae0000) returned 1 [0111.543] GetProcessHeap () returned 0xae0000 [0111.543] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb0eef0 | out: hHeap=0xae0000) returned 1 [0111.543] GetProcessHeap () returned 0xae0000 [0111.543] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07e20 | out: hHeap=0xae0000) returned 1 [0111.543] GetProcessHeap () returned 0xae0000 [0111.543] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaefff8 | out: hHeap=0xae0000) returned 1 [0111.543] GetProcessHeap () returned 0xae0000 [0111.543] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07b38 | out: hHeap=0xae0000) returned 1 [0111.543] GetProcessHeap () returned 0xae0000 [0111.543] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf1238 | out: hHeap=0xae0000) returned 1 [0111.544] GetProcessHeap () returned 0xae0000 [0111.544] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07ec8 | out: hHeap=0xae0000) returned 1 [0111.544] GetProcessHeap () returned 0xae0000 [0111.544] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb0ede0 | out: hHeap=0xae0000) returned 1 [0111.544] GetProcessHeap () returned 0xae0000 [0111.544] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07e08 | out: hHeap=0xae0000) returned 1 [0111.544] GetProcessHeap () returned 0xae0000 [0111.544] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xafe388 | out: hHeap=0xae0000) returned 1 [0111.544] GetProcessHeap () returned 0xae0000 [0111.544] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07e38 | out: hHeap=0xae0000) returned 1 [0111.544] GetProcessHeap () returned 0xae0000 [0111.544] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xafe418 | out: hHeap=0xae0000) returned 1 [0111.544] GetProcessHeap () returned 0xae0000 [0111.544] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07e50 | out: hHeap=0xae0000) returned 1 [0111.544] GetProcessHeap () returned 0xae0000 [0111.545] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb08938 | out: hHeap=0xae0000) returned 1 [0111.545] GetProcessHeap () returned 0xae0000 [0111.545] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07d30 | out: hHeap=0xae0000) returned 1 [0111.545] GetProcessHeap () returned 0xae0000 [0111.545] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaeff68 | out: hHeap=0xae0000) returned 1 [0111.545] GetProcessHeap () returned 0xae0000 [0111.545] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07b20 | out: hHeap=0xae0000) returned 1 [0111.545] GetProcessHeap () returned 0xae0000 [0111.545] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xae6718 | out: hHeap=0xae0000) returned 1 [0111.545] GetProcessHeap () returned 0xae0000 [0111.545] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07ca0 | out: hHeap=0xae0000) returned 1 [0111.545] GetProcessHeap () returned 0xae0000 [0111.545] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb089a8 | out: hHeap=0xae0000) returned 1 [0111.545] GetProcessHeap () returned 0xae0000 [0111.545] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07dc0 | out: hHeap=0xae0000) returned 1 [0111.545] GetProcessHeap () returned 0xae0000 [0111.546] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf6d20 | out: hHeap=0xae0000) returned 1 [0111.546] GetProcessHeap () returned 0xae0000 [0111.546] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf8720 | out: hHeap=0xae0000) returned 1 [0111.546] GetProcessHeap () returned 0xae0000 [0111.546] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0xa4) returned 0xaf0ba8 [0111.546] GetProcessHeap () returned 0xae0000 [0111.546] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07d00 | out: hHeap=0xae0000) returned 1 [0111.546] GetProcessHeap () returned 0xae0000 [0111.546] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07c58 | out: hHeap=0xae0000) returned 1 [0111.546] GetProcessHeap () returned 0xae0000 [0111.546] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf10d8 | out: hHeap=0xae0000) returned 1 [0111.546] GetProcessHeap () returned 0xae0000 [0111.546] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07c70 | out: hHeap=0xae0000) returned 1 [0111.546] GetProcessHeap () returned 0xae0000 [0111.546] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07c40 | out: hHeap=0xae0000) returned 1 [0111.547] GetProcessHeap () returned 0xae0000 [0111.547] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x14) returned 0xaf8660 [0111.547] GetProcessHeap () returned 0xae0000 [0111.547] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0xe) returned 0xb07dc0 [0111.547] ResetEvent (hEvent=0x2ac) returned 1 [0111.547] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x914a4c, lpParameter=0xaf8660, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b0 [0111.548] CloseHandle (hObject=0x2b0) returned 1 [0111.548] GetProcessHeap () returned 0xae0000 [0111.548] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10) returned 0xb07b38 [0111.549] GetProcessHeap () returned 0xae0000 [0111.549] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10) returned 0xb07d00 [0111.549] GetProcessHeap () returned 0xae0000 [0111.549] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10) returned 0xb07c58 [0111.549] GetProcessHeap () returned 0xae0000 [0111.549] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x90) returned 0xaf10d8 [0111.549] GetProcessHeap () returned 0xae0000 [0111.549] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10) returned 0xb07d30 [0111.549] htonl (hostlong=0xb4197730) returned 0x307719b4 [0111.549] GetProcessHeap () returned 0xae0000 [0111.549] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x28) returned 0xaf6d20 [0111.549] GetProcessHeap () returned 0xae0000 [0111.549] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10) returned 0xb07b20 [0111.550] GetProcessHeap () returned 0xae0000 [0111.550] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x4) returned 0xb08ab8 [0111.550] GetProcessHeap () returned 0xae0000 [0111.550] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x14) returned 0xaf83a0 [0111.550] GetProcessHeap () returned 0xae0000 [0111.550] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10) returned 0xb07c40 [0111.550] GetProcessHeap () returned 0xae0000 [0111.550] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x80) returned 0xae6718 [0111.550] GetProcessHeap () returned 0xae0000 [0111.550] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10) returned 0xb07c70 [0111.550] GetProcessHeap () returned 0xae0000 [0111.550] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x82) returned 0xaeff68 [0111.550] GetProcessHeap () returned 0xae0000 [0111.550] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10) returned 0xb07ca0 [0111.550] GetProcessHeap () returned 0xae0000 [0111.551] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x4) returned 0xb089d8 [0111.551] GetProcessHeap () returned 0xae0000 [0111.551] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10) returned 0xb07ec8 [0111.551] GetProcessHeap () returned 0xae0000 [0111.551] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x80) returned 0xaefff8 [0111.551] GetProcessHeap () returned 0xae0000 [0111.551] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10) returned 0xb07e08 [0111.551] GetProcessHeap () returned 0xae0000 [0111.551] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x2) returned 0xb08a08 [0111.551] GetProcessHeap () returned 0xae0000 [0111.551] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x4) returned 0xb089a8 [0111.551] GetProcessHeap () returned 0xae0000 [0111.551] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10) returned 0xb07e68 [0111.552] GetProcessHeap () returned 0xae0000 [0111.552] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x80) returned 0xaf1238 [0111.552] GetProcessHeap () returned 0xae0000 [0111.552] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10) returned 0xb07e20 [0111.552] GetProcessHeap () returned 0xae0000 [0111.552] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x4) returned 0xb089b8 [0111.552] GetProcessHeap () returned 0xae0000 [0111.552] RtlReAllocateHeap (Heap=0xae0000, Flags=0x0, Ptr=0xb08a08, Size=0x82) returned 0xaf12c0 [0111.552] GetProcessHeap () returned 0xae0000 [0111.552] RtlReAllocateHeap (Heap=0xae0000, Flags=0x0, Ptr=0xb089b8, Size=0x100) returned 0xb093c8 [0111.552] GetProcessHeap () returned 0xae0000 [0111.552] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10) returned 0xb07e38 [0111.552] GetProcessHeap () returned 0xae0000 [0111.552] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x82) returned 0xafe388 [0111.553] GetProcessHeap () returned 0xae0000 [0111.553] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10) returned 0xb07e50 [0111.553] GetProcessHeap () returned 0xae0000 [0111.553] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x82) returned 0xafe418 [0111.553] GetProcessHeap () returned 0xae0000 [0111.553] RtlReAllocateHeap (Heap=0xae0000, Flags=0x0, Ptr=0xaf12c0, Size=0x104) returned 0xb0ede0 [0111.553] GetProcessHeap () returned 0xae0000 [0111.553] RtlReAllocateHeap (Heap=0xae0000, Flags=0x0, Ptr=0xb093c8, Size=0x200) returned 0xb0eef0 [0111.554] GetProcessHeap () returned 0xae0000 [0111.554] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb089a8 | out: hHeap=0xae0000) returned 1 [0111.554] GetProcessHeap () returned 0xae0000 [0111.554] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb0eef0 | out: hHeap=0xae0000) returned 1 [0111.555] GetProcessHeap () returned 0xae0000 [0111.555] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07e20 | out: hHeap=0xae0000) returned 1 [0111.555] GetProcessHeap () returned 0xae0000 [0111.555] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaefff8 | out: hHeap=0xae0000) returned 1 [0111.555] GetProcessHeap () returned 0xae0000 [0111.555] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07ec8 | out: hHeap=0xae0000) returned 1 [0111.555] GetProcessHeap () returned 0xae0000 [0111.555] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf1238 | out: hHeap=0xae0000) returned 1 [0111.555] GetProcessHeap () returned 0xae0000 [0111.555] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07e68 | out: hHeap=0xae0000) returned 1 [0111.555] GetProcessHeap () returned 0xae0000 [0111.555] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb0ede0 | out: hHeap=0xae0000) returned 1 [0111.555] GetProcessHeap () returned 0xae0000 [0111.555] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07e08 | out: hHeap=0xae0000) returned 1 [0111.555] GetProcessHeap () returned 0xae0000 [0111.555] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xafe388 | out: hHeap=0xae0000) returned 1 [0111.556] GetProcessHeap () returned 0xae0000 [0111.556] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07e38 | out: hHeap=0xae0000) returned 1 [0111.556] GetProcessHeap () returned 0xae0000 [0111.556] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xafe418 | out: hHeap=0xae0000) returned 1 [0111.556] GetProcessHeap () returned 0xae0000 [0111.556] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07e50 | out: hHeap=0xae0000) returned 1 [0111.556] GetProcessHeap () returned 0xae0000 [0111.556] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb08ab8 | out: hHeap=0xae0000) returned 1 [0111.556] GetProcessHeap () returned 0xae0000 [0111.556] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07b20 | out: hHeap=0xae0000) returned 1 [0111.556] GetProcessHeap () returned 0xae0000 [0111.556] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaeff68 | out: hHeap=0xae0000) returned 1 [0111.556] GetProcessHeap () returned 0xae0000 [0111.556] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07c70 | out: hHeap=0xae0000) returned 1 [0111.556] GetProcessHeap () returned 0xae0000 [0111.556] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xae6718 | out: hHeap=0xae0000) returned 1 [0111.557] GetProcessHeap () returned 0xae0000 [0111.557] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07c40 | out: hHeap=0xae0000) returned 1 [0111.566] GetProcessHeap () returned 0xae0000 [0111.566] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb089d8 | out: hHeap=0xae0000) returned 1 [0111.566] GetProcessHeap () returned 0xae0000 [0111.567] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07ca0 | out: hHeap=0xae0000) returned 1 [0111.567] GetProcessHeap () returned 0xae0000 [0111.567] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf6d20 | out: hHeap=0xae0000) returned 1 [0111.567] GetProcessHeap () returned 0xae0000 [0111.567] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf83a0 | out: hHeap=0xae0000) returned 1 [0111.567] GetProcessHeap () returned 0xae0000 [0111.567] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0xa4) returned 0xaf0628 [0111.567] GetProcessHeap () returned 0xae0000 [0111.567] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07d00 | out: hHeap=0xae0000) returned 1 [0111.567] GetProcessHeap () returned 0xae0000 [0111.567] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07c58 | out: hHeap=0xae0000) returned 1 [0111.567] GetProcessHeap () returned 0xae0000 [0111.567] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf10d8 | out: hHeap=0xae0000) returned 1 [0111.567] GetProcessHeap () returned 0xae0000 [0111.567] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07d30 | out: hHeap=0xae0000) returned 1 [0111.568] GetProcessHeap () returned 0xae0000 [0111.568] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07b38 | out: hHeap=0xae0000) returned 1 [0111.568] GetProcessHeap () returned 0xae0000 [0111.568] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x14) returned 0xaf8500 [0111.568] GetProcessHeap () returned 0xae0000 [0111.568] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0xe) returned 0xb07b20 [0111.568] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x914a4c, lpParameter=0xaf8500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b0 [0111.569] CloseHandle (hObject=0x2b0) returned 1 [0111.573] WaitForSingleObject (hHandle=0x2ac, dwMilliseconds=0xffffffff) Thread: id = 20 os_tid = 0x1a4 [0111.574] GetLogicalDrives () returned 0x4 [0111.574] GetProcessHeap () returned 0xae0000 [0111.574] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x20) returned 0xb080a0 [0111.574] GetProcessHeap () returned 0xae0000 [0111.574] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x8, Size=0x1e) returned 0xb08140 [0111.575] GetProcessHeap () returned 0xae0000 [0111.575] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x1e) returned 0xb07f88 [0111.575] GetProcessHeap () returned 0xae0000 [0111.575] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x90) returned 0xaf10d8 [0111.575] GetProcessHeap () returned 0xae0000 [0111.575] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xaf10d8 | out: hHeap=0xae0000) returned 1 [0111.575] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xb08140, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0111.575] GetProcessHeap () returned 0xae0000 [0111.575] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb07f88 | out: hHeap=0xae0000) returned 1 [0111.575] GetProcessHeap () returned 0xae0000 [0111.575] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb080a0 | out: hHeap=0xae0000) returned 1 [0111.575] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x292febc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x292febc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0111.576] GetProcessHeap () returned 0xae0000 [0111.576] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb08140 | out: hHeap=0xae0000) returned 1 [0111.576] GetProcessHeap () returned 0xae0000 [0111.576] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x40) returned 0xaf2890 [0111.576] GetProcessHeap () returned 0xae0000 [0111.576] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x28) returned 0xaf6d80 [0111.576] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2b0 [0111.577] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2b4 [0111.577] GetLogicalDrives () returned 0x4 [0111.577] Sleep (dwMilliseconds=0x3e8) [0112.921] GetLogicalDrives () returned 0x4 [0112.921] Sleep (dwMilliseconds=0x3e8) [0114.792] GetLogicalDrives () returned 0x4 [0114.792] Sleep (dwMilliseconds=0x3e8) [0116.231] GetLogicalDrives () returned 0x4 [0116.231] Sleep (dwMilliseconds=0x3e8) [0118.051] GetLogicalDrives () returned 0x4 [0118.051] Sleep (dwMilliseconds=0x3e8) [0119.320] GetLogicalDrives () returned 0x4 [0119.320] Sleep (dwMilliseconds=0x3e8) [0120.777] GetLogicalDrives () returned 0x4 [0120.777] Sleep (dwMilliseconds=0x3e8) [0122.035] GetLogicalDrives () returned 0x4 [0122.035] Sleep (dwMilliseconds=0x3e8) [0123.569] GetLogicalDrives () returned 0x4 [0123.569] Sleep (dwMilliseconds=0x3e8) [0124.894] GetLogicalDrives () returned 0x4 [0124.938] Sleep (dwMilliseconds=0x3e8) [0126.208] GetLogicalDrives () returned 0x4 [0126.209] Sleep (dwMilliseconds=0x3e8) [0130.148] GetLogicalDrives () returned 0x4 [0130.149] Sleep (dwMilliseconds=0x3e8) [0131.953] GetLogicalDrives () returned 0x4 [0131.953] Sleep (dwMilliseconds=0x3e8) [0133.426] GetLogicalDrives () returned 0x4 [0133.426] Sleep (dwMilliseconds=0x3e8) [0134.889] GetLogicalDrives () returned 0x4 [0134.889] Sleep (dwMilliseconds=0x3e8) [0136.330] GetLogicalDrives () returned 0x4 [0136.330] Sleep (dwMilliseconds=0x3e8) Thread: id = 21 os_tid = 0xf0 [0112.810] GetProcessHeap () returned 0xae0000 [0112.810] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x38) returned 0xaf9378 [0112.810] GetProcessHeap () returned 0xae0000 [0112.811] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x18) returned 0xaf8520 [0112.811] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2b8 [0112.811] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2bc [0112.811] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2c0 [0112.811] GetProcessHeap () returned 0xae0000 [0112.811] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0xb0ffa0 [0112.812] GetProcessHeap () returned 0xae0000 [0112.812] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x50) returned 0xb09600 [0112.812] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75e90000 [0112.813] GetProcAddress (hModule=0x75e90000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75ea6b30 [0112.813] Wow64DisableWow64FsRedirection (in: OldValue=0x26af83c | out: OldValue=0x26af83c*=0x0) returned 1 [0112.813] GetProcessHeap () returned 0xae0000 [0112.813] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb09600 | out: hHeap=0xae0000) returned 1 [0112.813] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1, lpStartAddress=0x9148ba, lpParameter=0x26af840, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c4 [0112.815] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1, lpStartAddress=0x9148ba, lpParameter=0x26af840, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c8 [0112.816] GetProcessHeap () returned 0xae0000 [0112.816] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0xb1ffa8 [0112.817] FindFirstFileW (in: lpFileName="\\\\?\\C:\\*", lpFindFileData=0x26af5b0 | out: lpFindFileData=0x26af5b0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1b0960d, dwReserved1=0x745f9fc4, cFileName="$GetCurrent", cAlternateFileName="$GETCU~1")) returned 0xaf98b8 [0112.818] GetProcessHeap () returned 0xae0000 [0112.818] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0xb2ffb0 [0112.818] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$GetCurrent\\*", lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0xaf95f8 [0112.823] FindNextFileW (in: hFindFile=0xaf95f8, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0112.824] FindNextFileW (in: hFindFile=0xaf95f8, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Logs", cAlternateFileName="")) returned 1 [0112.824] GetProcessHeap () returned 0xae0000 [0112.824] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0xb40fc0 [0112.825] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9538 [0112.830] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0112.830] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x542c8aac, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0xafe5f7a, ftLastWriteTime.dwHighDateTime=0x1d3273e, nFileSizeHigh=0x0, nFileSizeLow=0xa6b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="downlevel_2017_09_07_02_02_39_766.log", cAlternateFileName="DOWNLE~1.LOG")) returned 1 [0112.830] SetEvent (hEvent=0x2bc) returned 1 [0112.830] ResetEvent (hEvent=0x2c0) returned 1 [0112.831] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973abb0f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1774, dwReserved0=0x0, dwReserved1=0x0, cFileName="oobe_2017_09_07_03_08_57_737.log", cAlternateFileName="OOBE_2~1.LOG")) returned 1 [0112.831] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 1 [0112.831] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 0 [0112.831] FindClose (in: hFindFile=0xaf9538 | out: hFindFile=0xaf9538) returned 1 [0112.833] GetProcessHeap () returned 0xae0000 [0112.833] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb40fc0 | out: hHeap=0xae0000) returned 1 [0112.834] FindNextFileW (in: hFindFile=0xaf95f8, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SafeOS", cAlternateFileName="")) returned 1 [0112.834] GetProcessHeap () returned 0xae0000 [0112.834] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0xb40fc0 [0112.835] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0112.842] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0112.842] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9568f13f, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9568f13f, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x232c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentOOBE.dll", cAlternateFileName="GETCUR~1.DLL")) returned 1 [0112.842] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956819aa, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x956819aa, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentRollback.ini", cAlternateFileName="GETCUR~1.INI")) returned 1 [0112.843] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x54acc791, ftLastWriteTime.dwHighDateTime=0x1d3273a, nFileSizeHigh=0x0, nFileSizeLow=0x241, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupComplete.cmd", cAlternateFileName="PARTNE~1.CMD")) returned 1 [0112.843] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9575af11, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9577d1ec, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="preoobe.cmd", cAlternateFileName="")) returned 1 [0112.843] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 1 [0112.844] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 0 [0112.844] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0112.846] GetProcessHeap () returned 0xae0000 [0112.846] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb40fc0 | out: hHeap=0xae0000) returned 1 [0112.847] FindNextFileW (in: hFindFile=0xaf95f8, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SafeOS", cAlternateFileName="")) returned 0 [0112.847] FindClose (in: hFindFile=0xaf95f8 | out: hFindFile=0xaf95f8) returned 1 [0112.848] GetProcessHeap () returned 0xae0000 [0112.848] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb2ffb0 | out: hHeap=0xae0000) returned 1 [0112.849] FindNextFileW (in: hFindFile=0xaf98b8, lpFindFileData=0x26af5b0 | out: lpFindFileData=0x26af5b0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1b0960d, dwReserved1=0x745f9fc4, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 1 [0112.850] GetProcessHeap () returned 0xae0000 [0112.850] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0xb30fb8 [0112.851] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\*", lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0xaf97f8 [0112.851] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0112.851] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="S-1-5-18", cAlternateFileName="")) returned 1 [0112.852] GetProcessHeap () returned 0xae0000 [0112.852] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0xb41fc8 [0112.852] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-18\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9138 [0112.853] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0112.853] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0112.853] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0112.853] FindClose (in: hFindFile=0xaf9138 | out: hFindFile=0xaf9138) returned 1 [0113.071] GetProcessHeap () returned 0xae0000 [0113.072] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb41fc8 | out: hHeap=0xae0000) returned 1 [0113.104] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0113.104] GetProcessHeap () returned 0xae0000 [0113.104] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0xb41fc8 [0113.105] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9538 [0113.106] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.106] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0113.106] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0113.106] FindClose (in: hFindFile=0xaf9538 | out: hFindFile=0xaf9538) returned 1 [0113.107] GetProcessHeap () returned 0xae0000 [0113.107] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb41fc8 | out: hHeap=0xae0000) returned 1 [0113.108] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 0 [0113.108] FindClose (in: hFindFile=0xaf97f8 | out: hFindFile=0xaf97f8) returned 1 [0113.108] GetProcessHeap () returned 0xae0000 [0113.109] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb30fb8 | out: hHeap=0xae0000) returned 1 [0113.110] FindNextFileW (in: hFindFile=0xaf98b8, lpFindFileData=0x26af5b0 | out: lpFindFileData=0x26af5b0*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1b0960d, dwReserved1=0x745f9fc4, cFileName="$WINRE_BACKUP_PARTITION.MARKER", cAlternateFileName="$WINRE~1.MAR")) returned 1 [0113.110] FindNextFileW (in: hFindFile=0xaf98b8, lpFindFileData=0x26af5b0 | out: lpFindFileData=0x26af5b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1b0960d, dwReserved1=0x745f9fc4, cFileName="588bce7c90097ed212", cAlternateFileName="588BCE~1")) returned 1 [0113.110] GetProcessHeap () returned 0xae0000 [0113.110] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0xb30fb8 [0113.112] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\*", lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0xaf9538 [0113.199] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0113.201] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1025", cAlternateFileName="")) returned 1 [0113.201] GetProcessHeap () returned 0xae0000 [0113.201] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0113.202] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0113.204] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.204] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.204] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x121e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.204] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.205] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.205] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0113.205] GetProcessHeap () returned 0xae0000 [0113.205] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0113.205] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1028", cAlternateFileName="")) returned 1 [0113.205] GetProcessHeap () returned 0xae0000 [0113.205] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0113.205] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf97f8 [0113.207] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.207] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.208] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.208] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.208] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.208] FindClose (in: hFindFile=0xaf97f8 | out: hFindFile=0xaf97f8) returned 1 [0113.209] GetProcessHeap () returned 0xae0000 [0113.209] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0113.209] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1029", cAlternateFileName="")) returned 1 [0113.209] GetProcessHeap () returned 0xae0000 [0113.209] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0113.209] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf97f8 [0113.210] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.210] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.211] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13c4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.211] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.211] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.211] FindClose (in: hFindFile=0xaf97f8 | out: hFindFile=0xaf97f8) returned 1 [0113.212] GetProcessHeap () returned 0xae0000 [0113.212] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0113.212] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1030", cAlternateFileName="")) returned 1 [0113.212] GetProcessHeap () returned 0xae0000 [0113.212] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0113.212] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0113.213] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.214] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xcf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.214] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12fb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.214] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.214] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.215] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0113.215] GetProcessHeap () returned 0xae0000 [0113.215] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0113.215] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1031", cAlternateFileName="")) returned 1 [0113.215] GetProcessHeap () returned 0xae0000 [0113.215] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0113.215] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf97f8 [0113.217] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.217] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.217] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.217] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.218] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.218] FindClose (in: hFindFile=0xaf97f8 | out: hFindFile=0xaf97f8) returned 1 [0113.218] GetProcessHeap () returned 0xae0000 [0113.218] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0113.218] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1032", cAlternateFileName="")) returned 1 [0113.218] GetProcessHeap () returned 0xae0000 [0113.218] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0113.218] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9178 [0113.220] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.220] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x22ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.220] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1510c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.221] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.221] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.221] FindClose (in: hFindFile=0xaf9178 | out: hFindFile=0xaf9178) returned 1 [0113.221] GetProcessHeap () returned 0xae0000 [0113.221] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0113.221] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1033", cAlternateFileName="")) returned 1 [0113.222] GetProcessHeap () returned 0xae0000 [0113.222] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0113.222] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0113.223] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.223] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd723cc00, ftCreationTime.dwHighDateTime=0x1cabb47, ftLastAccessTime.dwLowDateTime=0xd723cc00, ftLastAccessTime.dwHighDateTime=0x1cabb47, ftLastWriteTime.dwLowDateTime=0xd723cc00, ftLastWriteTime.dwHighDateTime=0x1cabb47, nFileSizeHigh=0x0, nFileSizeLow=0xc74, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.224] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x47ad1a00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x47ad1a00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x47ad1a00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12db0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.224] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.224] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.224] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0113.224] GetProcessHeap () returned 0xae0000 [0113.224] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0113.225] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1035", cAlternateFileName="")) returned 1 [0113.225] GetProcessHeap () returned 0xae0000 [0113.225] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0113.225] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9838 [0113.226] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.226] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe76, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.227] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12cde, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.227] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.227] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.227] FindClose (in: hFindFile=0xaf9838 | out: hFindFile=0xaf9838) returned 1 [0113.228] GetProcessHeap () returned 0xae0000 [0113.228] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0113.228] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1036", cAlternateFileName="")) returned 1 [0113.228] GetProcessHeap () returned 0xae0000 [0113.228] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0113.228] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf97f8 [0113.231] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.231] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.232] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x14412, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.232] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.232] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.232] FindClose (in: hFindFile=0xaf97f8 | out: hFindFile=0xaf97f8) returned 1 [0113.233] GetProcessHeap () returned 0xae0000 [0113.233] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0113.233] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1037", cAlternateFileName="")) returned 1 [0113.233] GetProcessHeap () returned 0xae0000 [0113.233] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0113.233] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0113.234] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.234] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.234] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1198c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.234] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.235] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.235] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0113.235] GetProcessHeap () returned 0xae0000 [0113.235] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0113.235] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1038", cAlternateFileName="")) returned 1 [0113.235] GetProcessHeap () returned 0xae0000 [0113.235] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0113.235] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0113.236] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.236] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x109e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.236] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x151aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.237] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.237] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.237] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0113.237] GetProcessHeap () returned 0xae0000 [0113.237] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0113.237] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1040", cAlternateFileName="")) returned 1 [0113.237] GetProcessHeap () returned 0xae0000 [0113.237] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0113.238] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9138 [0113.239] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.239] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.239] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x138bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.239] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.240] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.240] FindClose (in: hFindFile=0xaf9138 | out: hFindFile=0xaf9138) returned 1 [0113.240] GetProcessHeap () returned 0xae0000 [0113.240] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0113.240] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1041", cAlternateFileName="")) returned 1 [0113.240] GetProcessHeap () returned 0xae0000 [0113.240] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0113.240] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0113.502] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.542] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x278d, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.542] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x10a82, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.542] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.543] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.543] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0113.543] GetProcessHeap () returned 0xae0000 [0113.543] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0113.543] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1042", cAlternateFileName="")) returned 1 [0113.543] GetProcessHeap () returned 0xae0000 [0113.544] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0113.544] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0113.544] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.544] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x318f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.544] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xfed6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.545] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.545] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.545] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0113.545] GetProcessHeap () returned 0xae0000 [0113.545] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0113.546] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1043", cAlternateFileName="")) returned 1 [0113.546] GetProcessHeap () returned 0xae0000 [0113.546] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0113.546] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0113.546] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.546] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdda, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.547] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13712, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.547] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.547] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.547] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0113.548] GetProcessHeap () returned 0xae0000 [0113.548] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0113.548] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1044", cAlternateFileName="")) returned 1 [0113.548] GetProcessHeap () returned 0xae0000 [0113.548] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0113.548] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9838 [0113.548] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.548] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.549] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x135c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.549] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.549] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.550] FindClose (in: hFindFile=0xaf9838 | out: hFindFile=0xaf9838) returned 1 [0113.550] GetProcessHeap () returned 0xae0000 [0113.550] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0113.550] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1045", cAlternateFileName="")) returned 1 [0113.550] GetProcessHeap () returned 0xae0000 [0113.550] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0113.550] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0113.551] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.551] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.552] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.552] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.552] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.553] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0113.553] GetProcessHeap () returned 0xae0000 [0113.553] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0113.553] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1046", cAlternateFileName="")) returned 1 [0113.553] GetProcessHeap () returned 0xae0000 [0113.553] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0113.553] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0113.553] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.554] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe63, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.554] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.554] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.554] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.555] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0113.555] GetProcessHeap () returned 0xae0000 [0113.555] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0113.555] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1049", cAlternateFileName="")) returned 1 [0113.555] GetProcessHeap () returned 0xae0000 [0113.555] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0113.555] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0113.556] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.556] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.556] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13e4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.556] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.557] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.557] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0113.557] GetProcessHeap () returned 0xae0000 [0113.557] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0113.557] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1053", cAlternateFileName="")) returned 1 [0113.558] GetProcessHeap () returned 0xae0000 [0113.558] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0113.558] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0113.558] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.558] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf19, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.558] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.559] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.559] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.559] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0113.559] GetProcessHeap () returned 0xae0000 [0113.559] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0113.560] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1055", cAlternateFileName="")) returned 1 [0113.560] GetProcessHeap () returned 0xae0000 [0113.560] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0113.560] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9138 [0113.560] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.560] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf13, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.561] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12c12, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.561] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.561] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.561] FindClose (in: hFindFile=0xaf9138 | out: hFindFile=0xaf9138) returned 1 [0113.562] GetProcessHeap () returned 0xae0000 [0113.562] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0113.562] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="2052", cAlternateFileName="")) returned 1 [0113.562] GetProcessHeap () returned 0xae0000 [0113.562] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0113.562] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0113.562] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.562] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x16c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.563] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.563] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.563] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.564] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0113.564] GetProcessHeap () returned 0xae0000 [0113.564] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0113.564] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="2070", cAlternateFileName="")) returned 1 [0113.564] GetProcessHeap () returned 0xae0000 [0113.564] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0113.564] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9178 [0113.565] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.565] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.565] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1397e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.565] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.566] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.566] FindClose (in: hFindFile=0xaf9178 | out: hFindFile=0xaf9178) returned 1 [0113.566] GetProcessHeap () returned 0xae0000 [0113.566] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0113.566] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="3076", cAlternateFileName="")) returned 1 [0113.566] GetProcessHeap () returned 0xae0000 [0113.566] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0113.566] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0113.567] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.567] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.567] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.568] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.568] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.568] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0113.568] GetProcessHeap () returned 0xae0000 [0113.568] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0113.568] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="3082", cAlternateFileName="")) returned 1 [0113.569] GetProcessHeap () returned 0xae0000 [0113.569] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0113.569] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0113.569] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.569] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.569] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1387c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.570] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.570] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.570] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0113.571] GetProcessHeap () returned 0xae0000 [0113.571] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0113.571] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Client", cAlternateFileName="")) returned 1 [0113.571] GetProcessHeap () returned 0xae0000 [0113.571] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0113.571] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9138 [0113.571] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.571] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce2bc00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0xce2bc00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0xce2bc00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x31444, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0113.572] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0113.572] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0 [0113.865] FindClose (in: hFindFile=0xaf9138 | out: hFindFile=0xaf9138) returned 1 [0113.875] GetProcessHeap () returned 0xae0000 [0113.875] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0113.888] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbc518d00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbc518d00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbc518d00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3ef6, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="DHtmlHeader.html", cAlternateFileName="DHTMLH~1.HTM")) returned 1 [0113.907] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x159d5, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="DisplayIcon.ico", cAlternateFileName="DISPLA~1.ICO")) returned 1 [0113.907] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Extended", cAlternateFileName="")) returned 1 [0113.908] GetProcessHeap () returned 0xae0000 [0113.908] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3401068 [0113.908] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0113.908] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.909] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2a714f00, ftCreationTime.dwHighDateTime=0x1cac6f0, ftLastAccessTime.dwLowDateTime=0x2a714f00, ftLastAccessTime.dwHighDateTime=0x1cac6f0, ftLastWriteTime.dwLowDateTime=0x2a714f00, ftLastWriteTime.dwHighDateTime=0x1cac6f0, nFileSizeHigh=0x0, nFileSizeLow=0x16c82, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0113.909] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0113.909] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0 [0113.909] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0113.909] GetProcessHeap () returned 0xae0000 [0113.910] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3401068 | out: hHeap=0xae0000) returned 1 [0113.910] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Graphics", cAlternateFileName="")) returned 1 [0113.910] GetProcessHeap () returned 0xae0000 [0113.910] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3401068 [0113.910] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf97f8 [0113.912] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.912] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Print.ico", cAlternateFileName="")) returned 1 [0113.913] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate1.ico", cAlternateFileName="")) returned 1 [0113.913] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate2.ico", cAlternateFileName="")) returned 1 [0113.913] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate3.ico", cAlternateFileName="")) returned 1 [0113.913] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate4.ico", cAlternateFileName="")) returned 1 [0113.914] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate5.ico", cAlternateFileName="")) returned 1 [0113.914] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate6.ico", cAlternateFileName="")) returned 1 [0113.914] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate7.ico", cAlternateFileName="")) returned 1 [0113.915] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate8.ico", cAlternateFileName="")) returned 1 [0113.915] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Save.ico", cAlternateFileName="")) returned 1 [0113.915] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x8f66, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.ico", cAlternateFileName="")) returned 1 [0113.915] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b5e7f00, ftCreationTime.dwHighDateTime=0x1ca927c, ftLastAccessTime.dwLowDateTime=0x5b5e7f00, ftLastAccessTime.dwHighDateTime=0x1ca927c, ftLastWriteTime.dwLowDateTime=0x5b5e7f00, ftLastWriteTime.dwHighDateTime=0x1ca927c, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="stop.ico", cAlternateFileName="")) returned 1 [0113.916] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqMet.ico", cAlternateFileName="SYSREQ~1.ICO")) returned 1 [0113.917] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqNotMet.ico", cAlternateFileName="SYSREQ~2.ICO")) returned 1 [0113.917] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 1 [0113.918] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 0 [0113.918] FindClose (in: hFindFile=0xaf97f8 | out: hFindFile=0xaf97f8) returned 1 [0113.920] GetProcessHeap () returned 0xae0000 [0113.920] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3401068 | out: hHeap=0xae0000) returned 1 [0113.920] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0xe2c, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="header.bmp", cAlternateFileName="")) returned 1 [0113.920] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x66ea7e00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0xad1384b, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Core.mzz", cAlternateFileName="NETFX_~1.MZZ")) returned 1 [0113.921] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xc183da00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0x1d0200, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Core_x64.msi", cAlternateFileName="NETFX_~1.MSI")) returned 1 [0113.921] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4c130c00, ftCreationTime.dwHighDateTime=0x1cac6d9, ftLastAccessTime.dwLowDateTime=0x4c130c00, ftLastAccessTime.dwHighDateTime=0x1cac6d9, ftLastWriteTime.dwLowDateTime=0x4c130c00, ftLastWriteTime.dwHighDateTime=0x1cac6d9, nFileSizeHigh=0x0, nFileSizeLow=0x11c000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Core_x86.msi", cAlternateFileName="NETFX_~2.MSI")) returned 1 [0113.921] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf7cd9415, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x29222c7, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Extended.mzz", cAlternateFileName="NETFX_~2.MZZ")) returned 1 [0113.922] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2dbe0800, ftCreationTime.dwHighDateTime=0x1cac6fb, ftLastAccessTime.dwLowDateTime=0x2dbe0800, ftLastAccessTime.dwHighDateTime=0x1cac6fb, ftLastWriteTime.dwLowDateTime=0x2dbe0800, ftLastWriteTime.dwHighDateTime=0x1cac6fb, nFileSizeHigh=0x0, nFileSizeLow=0xd5000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Extended_x64.msi", cAlternateFileName="NETFX_~3.MSI")) returned 1 [0113.922] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x7626f700, ftCreationTime.dwHighDateTime=0x1cac6f6, ftLastAccessTime.dwLowDateTime=0x7626f700, ftLastAccessTime.dwHighDateTime=0x1cac6f6, ftLastWriteTime.dwLowDateTime=0x7626f700, ftLastWriteTime.dwHighDateTime=0x1cac6f6, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Extended_x86.msi", cAlternateFileName="NETFX_~4.MSI")) returned 1 [0113.922] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4a0f7400, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x4a0f7400, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x4a0f7400, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x426ae, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="ParameterInfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0113.922] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x19dedd00, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x19dedd00, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x19dedd00, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d200, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="RGB9RAST_x64.msi", cAlternateFileName="RGB9RA~1.MSI")) returned 1 [0113.923] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x177c8300, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x177c8300, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x177c8300, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x17200, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="RGB9Rast_x86.msi", cAlternateFileName="RGB9RA~2.MSI")) returned 1 [0113.923] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x13148, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Setup.exe", cAlternateFileName="")) returned 1 [0113.923] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0xc5158, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SetupEngine.dll", cAlternateFileName="SETUPE~1.DLL")) returned 1 [0113.924] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x48150, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SetupUi.dll", cAlternateFileName="")) returned 1 [0113.924] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5381000, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x5381000, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x5381000, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x75a8, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SetupUi.xsd", cAlternateFileName="")) returned 1 [0113.924] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6519be00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0x6519be00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0x6519be00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x17758, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SetupUtility.exe", cAlternateFileName="SETUPU~1.EXE")) returned 1 [0113.925] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0xa078, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SplashScreen.bmp", cAlternateFileName="SPLASH~1.BMP")) returned 1 [0113.925] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x143bc400, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0x143bc400, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x143bc400, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x23420, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0113.925] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3704, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Strings.xml", cAlternateFileName="")) returned 1 [0113.925] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x97f2, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0113.926] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0x19688, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="watermark.bmp", cAlternateFileName="WATERM~1.BMP")) returned 1 [0113.926] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0x2120bc00, ftLastWriteTime.dwHighDateTime=0x1cac6c9, nFileSizeHigh=0x0, nFileSizeLow=0x4f5113, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows6.0-KB956250-v6001-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0113.926] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0x1bbe7400, ftLastWriteTime.dwHighDateTime=0x1cac6bf, nFileSizeHigh=0x0, nFileSizeLow=0x217520, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows6.0-KB956250-v6001-x86.msu", cAlternateFileName="WINDOW~2.MSU")) returned 1 [0113.927] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x5b8e5700, ftLastWriteTime.dwHighDateTime=0x1cac6d1, nFileSizeHigh=0x0, nFileSizeLow=0x4db1ce, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows6.1-KB958488-v6001-x64.msu", cAlternateFileName="WINDOW~3.MSU")) returned 1 [0113.927] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 1 [0113.928] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 0 [0113.928] FindClose (in: hFindFile=0xaf9538 | out: hFindFile=0xaf9538) returned 1 [0113.928] GetProcessHeap () returned 0xae0000 [0113.928] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb30fb8 | out: hHeap=0xae0000) returned 1 [0113.930] FindNextFileW (in: hFindFile=0xaf98b8, lpFindFileData=0x26af5b0 | out: lpFindFileData=0x26af5b0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6fa258, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1b0960d, dwReserved1=0x745f9fc4, cFileName="Boot", cAlternateFileName="")) returned 1 [0113.930] GetProcessHeap () returned 0xae0000 [0113.930] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0xb30fb8 [0113.931] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\*", lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0xaf9538 [0113.931] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0113.931] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xac3efa99, ftLastAccessTime.dwHighDateTime=0x1d4d5d3, ftLastWriteTime.dwLowDateTime=0xac3efa99, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="BCD", cAlternateFileName="")) returned 1 [0113.931] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0113.932] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0113.932] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0113.932] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0113.933] GetProcessHeap () returned 0xae0000 [0113.933] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3401068 [0113.934] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\bg-BG\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0113.934] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.934] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0113.934] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0113.935] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0113.935] GetProcessHeap () returned 0xae0000 [0113.935] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3401068 | out: hHeap=0xae0000) returned 1 [0113.935] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4e6d79, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef4e6d79, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x175a0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="bootspaces.dll", cAlternateFileName="BOOTSP~1.DLL")) returned 1 [0113.935] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xef703e94, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0113.936] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef4fcd12, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x185a0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="bootvhd.dll", cAlternateFileName="")) returned 1 [0113.936] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0113.936] GetProcessHeap () returned 0xae0000 [0113.936] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3401068 [0113.936] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0113.936] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.936] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2109581d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0113.937] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f1d4cf, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0113.937] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f1d4cf, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0113.937] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0113.937] GetProcessHeap () returned 0xae0000 [0113.937] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3401068 | out: hHeap=0xae0000) returned 1 [0113.937] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="da-DK", cAlternateFileName="")) returned 1 [0113.938] GetProcessHeap () returned 0xae0000 [0113.938] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3401068 [0113.938] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\da-DK\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0113.938] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.938] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0113.938] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5252b3, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0113.939] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5252b3, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0113.939] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0113.939] GetProcessHeap () returned 0xae0000 [0113.939] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3401068 | out: hHeap=0xae0000) returned 1 [0113.939] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="de-DE", cAlternateFileName="")) returned 1 [0113.939] GetProcessHeap () returned 0xae0000 [0113.939] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3401068 [0113.939] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\de-DE\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9178 [0113.940] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.940] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48079da, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0113.940] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef538bee, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0113.940] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef538bee, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0113.941] FindClose (in: hFindFile=0xaf9178 | out: hFindFile=0xaf9178) returned 1 [0113.941] GetProcessHeap () returned 0xae0000 [0113.941] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3401068 | out: hHeap=0xae0000) returned 1 [0113.941] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="el-GR", cAlternateFileName="")) returned 1 [0113.941] GetProcessHeap () returned 0xae0000 [0113.941] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3401068 [0113.941] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\el-GR\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0114.836] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.836] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0114.836] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0114.837] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0114.837] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0114.837] GetProcessHeap () returned 0xae0000 [0114.837] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3401068 | out: hHeap=0xae0000) returned 1 [0114.837] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="en-GB", cAlternateFileName="")) returned 1 [0114.837] GetProcessHeap () returned 0xae0000 [0114.837] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3401068 [0114.837] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\en-GB\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0114.837] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.838] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12158, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0114.838] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12158, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0114.838] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0114.838] GetProcessHeap () returned 0xae0000 [0114.838] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3401068 | out: hHeap=0xae0000) returned 1 [0114.838] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="en-US", cAlternateFileName="")) returned 1 [0114.839] GetProcessHeap () returned 0xae0000 [0114.839] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3401068 [0114.839] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\en-US\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf97f8 [0114.839] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.839] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef569843, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x327294d0, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x121a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0114.839] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0114.840] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0114.840] FindClose (in: hFindFile=0xaf97f8 | out: hFindFile=0xaf97f8) returned 1 [0114.840] GetProcessHeap () returned 0xae0000 [0114.840] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3401068 | out: hHeap=0xae0000) returned 1 [0114.840] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="es-ES", cAlternateFileName="")) returned 1 [0114.840] GetProcessHeap () returned 0xae0000 [0114.840] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3401068 [0114.840] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\es-ES\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0114.841] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.841] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0114.841] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef586d37, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0114.841] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef586d37, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0114.841] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0114.842] GetProcessHeap () returned 0xae0000 [0114.842] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3401068 | out: hHeap=0xae0000) returned 1 [0114.842] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="es-MX", cAlternateFileName="")) returned 1 [0114.842] GetProcessHeap () returned 0xae0000 [0114.842] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3401068 [0114.842] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\es-MX\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf97f8 [0114.842] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.842] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0114.843] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0114.843] FindClose (in: hFindFile=0xaf97f8 | out: hFindFile=0xaf97f8) returned 1 [0114.843] GetProcessHeap () returned 0xae0000 [0114.843] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3401068 | out: hHeap=0xae0000) returned 1 [0114.843] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="et-EE", cAlternateFileName="")) returned 1 [0114.843] GetProcessHeap () returned 0xae0000 [0114.843] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3401068 [0114.843] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\et-EE\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf97f8 [0114.844] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.844] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0114.844] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0114.844] FindClose (in: hFindFile=0xaf97f8 | out: hFindFile=0xaf97f8) returned 1 [0114.844] GetProcessHeap () returned 0xae0000 [0114.844] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3401068 | out: hHeap=0xae0000) returned 1 [0114.844] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0114.845] GetProcessHeap () returned 0xae0000 [0114.845] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3401068 [0114.845] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fi-FI\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0114.845] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.845] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0114.845] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef59a5b1, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0114.846] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef59a5b1, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0114.846] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0114.846] GetProcessHeap () returned 0xae0000 [0114.846] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3401068 | out: hHeap=0xae0000) returned 1 [0114.846] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Fonts", cAlternateFileName="")) returned 1 [0114.846] GetProcessHeap () returned 0xae0000 [0114.846] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3401068 [0114.846] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Fonts\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0114.849] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.849] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef782dd9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x386467, dwReserved0=0x0, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0114.849] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a1dbea, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef81cc08, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0114.850] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a902c2, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8771a7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1e4d4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0114.850] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b4eed5, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8c4060, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x243588, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0114.850] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8e28b4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2ab6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="malgunn_boot.ttf", cAlternateFileName="MALGUN~1.TTF")) returned 1 [0114.851] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8f4db4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2b506, dwReserved0=0x0, dwReserved1=0x0, cFileName="malgun_boot.ttf", cAlternateFileName="MALGUN~2.TTF")) returned 1 [0114.851] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9072c7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2318a, dwReserved0=0x0, dwReserved1=0x0, cFileName="meiryon_boot.ttf", cAlternateFileName="MEIRYO~1.TTF")) returned 1 [0114.852] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef918492, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2380b, dwReserved0=0x0, dwReserved1=0x0, cFileName="meiryo_boot.ttf", cAlternateFileName="MEIRYO~2.TTF")) returned 1 [0114.852] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef92a947, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x27a1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjhn_boot.ttf", cAlternateFileName="MSJHN_~1.TTF")) returned 1 [0114.852] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef93ce3b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x281fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjh_boot.ttf", cAlternateFileName="MSJH_B~1.TTF")) returned 1 [0114.853] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef94dfcd, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x25b3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="msyhn_boot.ttf", cAlternateFileName="MSYHN_~1.TTF")) returned 1 [0114.853] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef95f141, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x26255, dwReserved0=0x0, dwReserved1=0x0, cFileName="msyh_boot.ttf", cAlternateFileName="MSYH_B~1.TTF")) returned 1 [0114.853] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef96ef3e, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="segmono_boot.ttf", cAlternateFileName="SEGMON~1.TTF")) returned 1 [0114.854] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c0da69, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef97d9ab, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x14f66, dwReserved0=0x0, dwReserved1=0x0, cFileName="segoen_slboot.ttf", cAlternateFileName="SEGOEN~1.TTF")) returned 1 [0114.854] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef98c419, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x150a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="segoe_slboot.ttf", cAlternateFileName="SEGOE_~1.TTF")) returned 1 [0114.854] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef999ae4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1 [0114.854] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef999ae4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 0 [0114.855] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0114.857] GetProcessHeap () returned 0xae0000 [0114.857] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3401068 | out: hHeap=0xae0000) returned 1 [0114.857] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="fr-CA", cAlternateFileName="")) returned 1 [0114.857] GetProcessHeap () returned 0xae0000 [0114.857] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3401068 [0114.857] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fr-CA\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf97f8 [0114.858] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.858] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0114.858] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0114.858] FindClose (in: hFindFile=0xaf97f8 | out: hFindFile=0xaf97f8) returned 1 [0114.858] GetProcessHeap () returned 0xae0000 [0114.858] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3401068 | out: hHeap=0xae0000) returned 1 [0114.858] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0114.859] GetProcessHeap () returned 0xae0000 [0114.859] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3401068 [0114.859] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fr-FR\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0114.859] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.859] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13558, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0114.859] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ade2b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0114.860] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ade2b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0114.860] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0114.860] GetProcessHeap () returned 0xae0000 [0114.860] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3401068 | out: hHeap=0xae0000) returned 1 [0114.860] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="hr-HR", cAlternateFileName="")) returned 1 [0114.860] GetProcessHeap () returned 0xae0000 [0114.860] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3401068 [0114.860] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\hr-HR\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf97f8 [0114.861] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.861] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0114.861] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0114.861] FindClose (in: hFindFile=0xaf97f8 | out: hFindFile=0xaf97f8) returned 1 [0114.861] GetProcessHeap () returned 0xae0000 [0114.861] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3401068 | out: hHeap=0xae0000) returned 1 [0114.861] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0114.862] GetProcessHeap () returned 0xae0000 [0114.862] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3401068 [0114.862] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\hu-HU\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0114.862] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.862] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13360, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0114.862] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5c171b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39d81d8, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0114.863] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5c171b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39d81d8, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0114.863] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0114.863] GetProcessHeap () returned 0xae0000 [0114.863] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3401068 | out: hHeap=0xae0000) returned 1 [0114.863] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="it-IT", cAlternateFileName="")) returned 1 [0114.863] GetProcessHeap () returned 0xae0000 [0114.863] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3401068 [0114.863] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\it-IT\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf97f8 [0114.864] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.864] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0114.864] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5d8ab4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf30285aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0114.864] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5d8ab4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf30285aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0114.865] FindClose (in: hFindFile=0xaf97f8 | out: hFindFile=0xaf97f8) returned 1 [0114.865] GetProcessHeap () returned 0xae0000 [0114.865] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3401068 | out: hHeap=0xae0000) returned 1 [0114.865] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0114.865] GetProcessHeap () returned 0xae0000 [0114.865] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3401068 [0114.865] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ja-JP\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0115.228] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.228] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48c6596, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.228] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ed6c6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf300233f, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa798, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0115.228] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ed6c6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf300233f, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa798, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0115.229] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0115.229] GetProcessHeap () returned 0xae0000 [0115.229] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3401068 | out: hHeap=0xae0000) returned 1 [0115.229] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0115.229] GetProcessHeap () returned 0xae0000 [0115.229] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3401068 [0115.229] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ko-KR\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0115.231] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.231] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211c6af1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.231] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fdc0d7, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa7a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0115.232] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fdc0d7, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa7a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0115.232] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0115.232] GetProcessHeap () returned 0xae0000 [0115.232] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3401068 | out: hHeap=0xae0000) returned 1 [0115.232] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="lt-LT", cAlternateFileName="")) returned 1 [0115.232] GetProcessHeap () returned 0xae0000 [0115.232] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3401068 [0115.232] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\lt-LT\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0115.233] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.233] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.233] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0115.233] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0115.233] GetProcessHeap () returned 0xae0000 [0115.234] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3401068 | out: hHeap=0xae0000) returned 1 [0115.234] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="lv-LV", cAlternateFileName="")) returned 1 [0115.234] GetProcessHeap () returned 0xae0000 [0115.234] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3401068 [0115.234] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\lv-LV\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0115.235] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.235] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12758, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.236] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12758, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0115.236] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0115.236] GetProcessHeap () returned 0xae0000 [0115.236] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3401068 | out: hHeap=0xae0000) returned 1 [0115.236] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6196d8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbcf473f, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xc63a0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0115.236] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0115.237] GetProcessHeap () returned 0xae0000 [0115.237] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3401068 [0115.237] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nb-NO\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9138 [0115.238] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.238] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.239] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef62cf52, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0115.239] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef62cf52, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0115.239] FindClose (in: hFindFile=0xaf9138 | out: hFindFile=0xaf9138) returned 1 [0115.239] GetProcessHeap () returned 0xae0000 [0115.239] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3401068 | out: hHeap=0xae0000) returned 1 [0115.239] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0115.240] GetProcessHeap () returned 0xae0000 [0115.240] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3401068 [0115.240] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nl-NL\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0115.240] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.240] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13160, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.240] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6407cf, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0115.241] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6407cf, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0115.241] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0115.241] GetProcessHeap () returned 0xae0000 [0115.241] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3401068 | out: hHeap=0xae0000) returned 1 [0115.241] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0115.242] GetProcessHeap () returned 0xae0000 [0115.242] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3401068 [0115.242] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pl-PL\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9138 [0115.243] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.243] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.243] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0115.244] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0115.244] FindClose (in: hFindFile=0xaf9138 | out: hFindFile=0xaf9138) returned 1 [0115.244] GetProcessHeap () returned 0xae0000 [0115.244] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3401068 | out: hHeap=0xae0000) returned 1 [0115.244] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0115.244] GetProcessHeap () returned 0xae0000 [0115.244] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3401068 [0115.244] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-BR\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf97f8 [0115.246] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.246] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.247] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65dc94, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0115.247] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65dc94, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0115.247] FindClose (in: hFindFile=0xaf97f8 | out: hFindFile=0xaf97f8) returned 1 [0115.247] GetProcessHeap () returned 0xae0000 [0115.247] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3401068 | out: hHeap=0xae0000) returned 1 [0115.247] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0115.248] GetProcessHeap () returned 0xae0000 [0115.248] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3401068 [0115.248] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-PT\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf97f8 [0115.249] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.249] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.249] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6714dc, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0115.250] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6714dc, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0115.250] FindClose (in: hFindFile=0xaf97f8 | out: hFindFile=0xaf97f8) returned 1 [0115.250] GetProcessHeap () returned 0xae0000 [0115.250] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3401068 | out: hHeap=0xae0000) returned 1 [0115.250] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="qps-ploc", cAlternateFileName="")) returned 1 [0115.250] GetProcessHeap () returned 0xae0000 [0115.250] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3401068 [0115.250] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0115.251] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.251] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12160, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.252] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef684d85, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbd1a998, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xd398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0115.252] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef684d85, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbd1a998, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xd398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0115.252] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0115.252] GetProcessHeap () returned 0xae0000 [0115.252] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3401068 | out: hHeap=0xae0000) returned 1 [0115.252] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1 [0115.253] GetProcessHeap () returned 0xae0000 [0115.253] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3401068 [0115.253] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Resources\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf97f8 [0115.255] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.255] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9abff9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef597530, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x169a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootres.dll", cAlternateFileName="")) returned 1 [0115.255] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0115.255] GetProcessHeap () returned 0xae0000 [0115.255] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3412078 [0115.257] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Resources\\en-US\\*", lpFindFileData=0x26aee00 | out: lpFindFileData=0x26aee00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9838 [0115.258] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x26aee00 | out: lpFindFileData=0x26aee00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.258] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x26aee00 | out: lpFindFileData=0x26aee00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9baa67, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31acad58, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootres.dll.mui", cAlternateFileName="BOOTRE~1.MUI")) returned 1 [0115.259] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x26aee00 | out: lpFindFileData=0x26aee00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9baa67, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31acad58, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootres.dll.mui", cAlternateFileName="BOOTRE~1.MUI")) returned 0 [0115.259] FindClose (in: hFindFile=0xaf9838 | out: hFindFile=0xaf9838) returned 1 [0115.259] GetProcessHeap () returned 0xae0000 [0115.259] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3412078 | out: hHeap=0xae0000) returned 1 [0115.259] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0115.259] FindClose (in: hFindFile=0xaf97f8 | out: hFindFile=0xaf97f8) returned 1 [0115.259] GetProcessHeap () returned 0xae0000 [0115.260] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3401068 | out: hHeap=0xae0000) returned 1 [0115.261] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="ro-RO", cAlternateFileName="")) returned 1 [0115.262] GetProcessHeap () returned 0xae0000 [0115.262] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3401068 [0115.263] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ro-RO\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf97f8 [0115.264] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.265] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.265] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0115.266] FindClose (in: hFindFile=0xaf97f8 | out: hFindFile=0xaf97f8) returned 1 [0115.266] GetProcessHeap () returned 0xae0000 [0115.266] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3401068 | out: hHeap=0xae0000) returned 1 [0115.266] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0115.266] GetProcessHeap () returned 0xae0000 [0115.266] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3401068 [0115.266] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ru-RU\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9638 [0115.766] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.767] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.767] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0115.767] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0115.767] FindClose (in: hFindFile=0xaf9638 | out: hFindFile=0xaf9638) returned 1 [0115.768] GetProcessHeap () returned 0xae0000 [0115.768] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3401068 | out: hHeap=0xae0000) returned 1 [0115.769] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="sk-SK", cAlternateFileName="")) returned 1 [0115.769] GetProcessHeap () returned 0xae0000 [0115.769] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0115.769] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sk-SK\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9638 [0115.770] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.770] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.770] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0115.770] FindClose (in: hFindFile=0xaf9638 | out: hFindFile=0xaf9638) returned 1 [0115.770] GetProcessHeap () returned 0xae0000 [0115.770] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0115.770] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="sl-SI", cAlternateFileName="")) returned 1 [0115.771] GetProcessHeap () returned 0xae0000 [0115.771] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0115.771] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sl-SI\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9638 [0115.771] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.771] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.771] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0115.771] FindClose (in: hFindFile=0xaf9638 | out: hFindFile=0xaf9638) returned 1 [0115.772] GetProcessHeap () returned 0xae0000 [0115.772] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0115.772] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1 [0115.772] GetProcessHeap () returned 0xae0000 [0115.772] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0115.772] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9638 [0115.783] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.783] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.783] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0115.784] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0115.784] FindClose (in: hFindFile=0xaf9638 | out: hFindFile=0xaf9638) returned 1 [0115.784] GetProcessHeap () returned 0xae0000 [0115.784] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0115.784] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~2")) returned 1 [0115.784] GetProcessHeap () returned 0xae0000 [0115.784] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0115.784] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sr-Latn-RS\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9838 [0115.785] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.785] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.785] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0115.785] FindClose (in: hFindFile=0xaf9838 | out: hFindFile=0xaf9838) returned 1 [0115.785] GetProcessHeap () returned 0xae0000 [0115.785] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0115.785] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0115.786] GetProcessHeap () returned 0xae0000 [0115.786] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0115.786] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sv-SE\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9638 [0115.786] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.786] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.787] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0115.787] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0115.787] FindClose (in: hFindFile=0xaf9638 | out: hFindFile=0xaf9638) returned 1 [0115.787] GetProcessHeap () returned 0xae0000 [0115.787] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0115.787] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0115.787] GetProcessHeap () returned 0xae0000 [0115.788] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0115.788] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\tr-TR\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9638 [0115.789] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.789] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12558, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.789] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0115.790] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0115.790] FindClose (in: hFindFile=0xaf9638 | out: hFindFile=0xaf9638) returned 1 [0115.790] GetProcessHeap () returned 0xae0000 [0115.790] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0115.790] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="uk-UA", cAlternateFileName="")) returned 1 [0115.790] GetProcessHeap () returned 0xae0000 [0115.790] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0115.790] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\uk-UA\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9638 [0115.790] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.791] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.791] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0115.791] FindClose (in: hFindFile=0xaf9638 | out: hFindFile=0xaf9638) returned 1 [0115.791] GetProcessHeap () returned 0xae0000 [0115.791] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0115.791] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef6c9427, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef6c9427, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1236, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="updaterevokesipolicy.p7b", cAlternateFileName="UPDATE~1.P7B")) returned 1 [0115.792] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0115.792] GetProcessHeap () returned 0xae0000 [0115.792] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0115.792] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-CN\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9638 [0115.793] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.793] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.793] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6d7e9a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0115.793] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6d7e9a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0115.793] FindClose (in: hFindFile=0xaf9638 | out: hFindFile=0xaf9638) returned 1 [0115.793] GetProcessHeap () returned 0xae0000 [0115.794] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0115.794] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0115.794] GetProcessHeap () returned 0xae0000 [0115.794] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0115.794] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-HK\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0115.794] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.794] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf958, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.795] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x518ea25e, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe31db522, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xa558, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0115.795] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x518ea25e, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe31db522, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xa558, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0115.795] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0115.795] GetProcessHeap () returned 0xae0000 [0115.795] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0115.795] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0115.795] GetProcessHeap () returned 0xae0000 [0115.796] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0115.796] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-TW\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf97f8 [0115.796] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.796] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.796] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa598, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0115.797] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa598, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0115.797] FindClose (in: hFindFile=0xaf97f8 | out: hFindFile=0xaf97f8) returned 1 [0115.797] GetProcessHeap () returned 0xae0000 [0115.797] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0115.797] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0115.797] FindClose (in: hFindFile=0xaf9538 | out: hFindFile=0xaf9538) returned 1 [0115.797] GetProcessHeap () returned 0xae0000 [0115.797] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb30fb8 | out: hHeap=0xae0000) returned 1 [0115.800] FindNextFileW (in: hFindFile=0xaf98b8, lpFindFileData=0x26af5b0 | out: lpFindFileData=0x26af5b0*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xe47a48a8, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfb90936b, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0x607da, dwReserved0=0x1b0960d, dwReserved1=0x745f9fc4, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0115.801] FindNextFileW (in: hFindFile=0xaf98b8, lpFindFileData=0x26af5b0 | out: lpFindFileData=0x26af5b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5533ee0, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef9d0a0c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x1b0960d, dwReserved1=0x745f9fc4, cFileName="BOOTNXT", cAlternateFileName="")) returned 1 [0115.801] FindNextFileW (in: hFindFile=0xaf98b8, lpFindFileData=0x26af5b0 | out: lpFindFileData=0x26af5b0*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xc4ee267e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4ee267e, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xf1c63cdd, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x1b0960d, dwReserved1=0x745f9fc4, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0115.801] FindNextFileW (in: hFindFile=0xaf98b8, lpFindFileData=0x26af5b0 | out: lpFindFileData=0x26af5b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x745f9fc4, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0115.801] FindNextFileW (in: hFindFile=0xaf98b8, lpFindFileData=0x26af5b0 | out: lpFindFileData=0x26af5b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x745f9fc4, cFileName="ESD", cAlternateFileName="")) returned 1 [0115.801] GetProcessHeap () returned 0xae0000 [0115.801] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0xb30fb8 [0115.802] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ESD\\*", lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0xaf9838 [0115.987] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0115.988] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 0 [0115.988] FindClose (in: hFindFile=0xaf9838 | out: hFindFile=0xaf9838) returned 1 [0115.988] GetProcessHeap () returned 0xae0000 [0115.988] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb30fb8 | out: hHeap=0xae0000) returned 1 [0115.988] FindNextFileW (in: hFindFile=0xaf98b8, lpFindFileData=0x26af5b0 | out: lpFindFileData=0x26af5b0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7ef2dddf, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x7ef2dddf, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3d7ebe9, ftLastWriteTime.dwHighDateTime=0x1d4d600, nFileSizeHigh=0x0, nFileSizeLow=0x332fe000, dwReserved0=0xa0000003, dwReserved1=0x745f9fc4, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0115.988] FindNextFileW (in: hFindFile=0xaf98b8, lpFindFileData=0x26af5b0 | out: lpFindFileData=0x26af5b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x745f9fc4, cFileName="Logs", cAlternateFileName="")) returned 1 [0115.989] GetProcessHeap () returned 0xae0000 [0115.989] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0xb30fb8 [0115.989] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Logs\\*", lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0xaf9638 [0116.010] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0116.047] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5052fa31, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5052fa31, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Application.evtx", cAlternateFileName="APPLIC~1.EVT")) returned 1 [0116.047] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505ee5f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505ee5f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="HardwareEvents.evtx", cAlternateFileName="HARDWA~1.EVT")) returned 1 [0116.047] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505a2134, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505a2134, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Internet Explorer.evtx", cAlternateFileName="INTERN~1.EVT")) returned 1 [0116.048] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5057bed8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5057bed8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Key Management Service.evtx", cAlternateFileName="KEYMAN~1.EVT")) returned 1 [0116.048] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1dbd7c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1dbd7c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Client-Licensing-Platform%4Admin.evtx", cAlternateFileName="MICROS~1.EVT")) returned 1 [0116.048] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5d836e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5d836e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx", cAlternateFileName="MICROS~2.EVT")) returned 1 [0116.049] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9206ac5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9206ac5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9c0f529, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx", cAlternateFileName="MICROS~3.EVT")) returned 1 [0116.049] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppLocker%4EXE and DLL.evtx", cAlternateFileName="MICROS~4.EVT")) returned 1 [0116.049] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4169a7a, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4169a7a, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppLocker%4MSI and Script.evtx", cAlternateFileName="MI2EEA~1.EVT")) returned 1 [0116.050] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx", cAlternateFileName="MI07E1~1.EVT")) returned 1 [0116.050] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx", cAlternateFileName="MI8196~1.EVT")) returned 1 [0116.050] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41b5f2d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd41b5f2d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppModel-Runtime%4Admin.evtx", cAlternateFileName="MIE36C~1.EVT")) returned 1 [0116.051] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd389efbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd389efbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppReadiness%4Admin.evtx", cAlternateFileName="MIC5CB~1.EVT")) returned 1 [0116.051] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd38c5212, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd38c5212, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppReadiness%4Operational.evtx", cAlternateFileName="MIF8AA~1.EVT")) returned 1 [0116.051] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppXDeployment%4Operational.evtx", cAlternateFileName="MI34FE~1.EVT")) returned 1 [0116.052] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x211000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppXDeploymentServer%4Operational.evtx", cAlternateFileName="MIA24C~1.EVT")) returned 1 [0116.052] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx", cAlternateFileName="MIDBEC~1.EVT")) returned 1 [0116.052] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85798667, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x85798667, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppxPackaging%4Operational.evtx", cAlternateFileName="MI54F1~1.EVT")) returned 1 [0116.052] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74d25ab, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74d25ab, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx", cAlternateFileName="MI111F~1.EVT")) returned 1 [0116.053] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f96ca4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe1f96ca4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Bits-Client%4Operational.evtx", cAlternateFileName="MI9465~1.EVT")) returned 1 [0116.053] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8783aa15, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8783aa15, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-CodeIntegrity%4Operational.evtx", cAlternateFileName="MI03A7~1.EVT")) returned 1 [0116.054] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3c71c5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3c71c5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx", cAlternateFileName="MI5CA2~1.EVT")) returned 1 [0116.054] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx", cAlternateFileName="MI5FD1~1.EVT")) returned 1 [0116.054] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Crypto-DPAPI%4Operational.evtx", cAlternateFileName="MI8BDF~1.EVT")) returned 1 [0116.055] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3ed420, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3ed420, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx", cAlternateFileName="MIAEBD~1.EVT")) returned 1 [0116.055] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cef47f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cef47f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-DeviceSetupManager%4Admin.evtx", cAlternateFileName="MIA726~1.EVT")) returned 1 [0116.055] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-DeviceSetupManager%4Operational.evtx", cAlternateFileName="MI08CB~1.EVT")) returned 1 [0116.056] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc967f17e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc967f17e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Dhcp-Client%4Admin.evtx", cAlternateFileName="MI8270~1.EVT")) returned 1 [0116.056] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc96cb64b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc96cb64b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Dhcpv6-Client%4Admin.evtx", cAlternateFileName="MIEBFF~1.EVT")) returned 1 [0116.056] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64aa7b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca64aa7b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Diagnosis-DPS%4Operational.evtx", cAlternateFileName="MI9F85~1.EVT")) returned 1 [0116.057] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd9ec80, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xfd9ec80, ftLastAccessTime.dwHighDateTime=0x1d1a04f, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Diagnostics-Performance%4Operational.evtx", cAlternateFileName="MIBE3D~1.EVT")) returned 1 [0116.057] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9658ef3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9658ef3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-GroupPolicy%4Operational.evtx", cAlternateFileName="MIE38D~1.EVT")) returned 1 [0116.057] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9dcc480, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9dcc480, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-HotspotAuth%4Operational.evtx", cAlternateFileName="MIE386~1.EVT")) returned 1 [0116.057] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b4bacf, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b4bacf, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx", cAlternateFileName="MI6B25~1.EVT")) returned 1 [0116.058] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb66288f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-International%4Operational.evtx", cAlternateFileName="MI854A~1.EVT")) returned 1 [0116.058] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x506ad1ac, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x506ad1ac, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Kernel-Boot%4Operational.evtx", cAlternateFileName="MI32CE~1.EVT")) returned 1 [0116.058] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Kernel-EventTracing%4Admin.evtx", cAlternateFileName="MIA934~1.EVT")) returned 1 [0116.059] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5071f8b0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5071f8b0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Kernel-PnP%4Configuration.evtx", cAlternateFileName="MIB32D~1.EVT")) returned 1 [0116.059] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8ebf6d7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc8ebf6d7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx", cAlternateFileName="MICA77~1.EVT")) returned 1 [0116.059] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5090f75d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5090f75d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx", cAlternateFileName="MI1E8D~1.EVT")) returned 1 [0116.060] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd75102f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd75102f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx", cAlternateFileName="MID067~1.EVT")) returned 1 [0116.060] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Kernel-WHEA%4Errors.evtx", cAlternateFileName="MIDE4D~1.EVT")) returned 1 [0116.061] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Kernel-WHEA%4Operational.evtx", cAlternateFileName="MI36C5~1.EVT")) returned 1 [0116.061] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59547c37, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x59547c37, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Known Folders API Service.evtx", cAlternateFileName="MI86D6~1.EVT")) returned 1 [0116.061] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb7386e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbb7386e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-LiveId%4Operational.evtx", cAlternateFileName="MI4C58~1.EVT")) returned 1 [0116.062] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93d06f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93d06f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-MUI%4Admin.evtx", cAlternateFileName="MI30D3~1.EVT")) returned 1 [0116.062] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93aa49b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93aa49b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-MUI%4Operational.evtx", cAlternateFileName="MI6F01~1.EVT")) returned 1 [0116.062] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9d33b19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9d33b19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-NCSI%4Operational.evtx", cAlternateFileName="MI483C~1.EVT")) returned 1 [0116.062] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbcf0ff2, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbcf0ff2, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-NetworkProfile%4Operational.evtx", cAlternateFileName="MIFC66~1.EVT")) returned 1 [0116.063] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ab3154, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ab3154, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Ntfs%4Operational.evtx", cAlternateFileName="MI6E98~1.EVT")) returned 1 [0116.063] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ad9393, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ad9393, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Ntfs%4WHC.evtx", cAlternateFileName="MIB2AC~1.EVT")) returned 1 [0116.063] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5fe5cb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5fe5cb, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx", cAlternateFileName="MI6AFE~1.EVT")) returned 1 [0116.064] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe24cdef0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe24cdef0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-ReadyBoost%4Operational.evtx", cAlternateFileName="MIB9D2~1.EVT")) returned 1 [0116.064] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd125335f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd125335f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx", cAlternateFileName="MI7A67~1.EVT")) returned 1 [0116.064] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-SettingSync%4Debug.evtx", cAlternateFileName="MI3773~1.EVT")) returned 1 [0116.065] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-SettingSync%4Operational.evtx", cAlternateFileName="MI36AA~1.EVT")) returned 1 [0116.065] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Shell-Core%4ActionCenter.evtx", cAlternateFileName="MI2E2E~1.EVT")) returned 1 [0116.065] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Shell-Core%4Operational.evtx", cAlternateFileName="MI1C6C~1.EVT")) returned 1 [0116.066] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-SmbClient%4Connectivity.evtx", cAlternateFileName="MI00FB~1.EVT")) returned 1 [0116.066] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97b042f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97b042f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-SMBClient%4Operational.evtx", cAlternateFileName="MID8B0~1.EVT")) returned 1 [0116.066] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-SmbClient%4Security.evtx", cAlternateFileName="MI8CEE~1.EVT")) returned 1 [0116.066] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb1ea1c9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb1ea1c9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-SMBServer%4Audit.evtx", cAlternateFileName="MIE3AD~1.EVT")) returned 1 [0116.067] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb19dd19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb19dd19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-SMBServer%4Connectivity.evtx", cAlternateFileName="MI8248~1.EVT")) returned 1 [0116.068] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb151873, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb151873, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-SMBServer%4Operational.evtx", cAlternateFileName="MI4B6B~1.EVT")) returned 1 [0116.068] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb177aca, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb177aca, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-SMBServer%4Security.evtx", cAlternateFileName="MI7709~1.EVT")) returned 1 [0116.068] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd751ea61, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd751ea61, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Store%4Operational.evtx", cAlternateFileName="MICEDD~1.EVT")) returned 1 [0116.068] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd0763ff, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd0763ff, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-TaskScheduler%4Maintenance.evtx", cAlternateFileName="MIE2F0~1.EVT")) returned 1 [0116.069] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5089d037, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5089d037, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx", cAlternateFileName="MIAB1D~1.EVT")) returned 1 [0116.440] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x508c32a6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x508c32a6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx", cAlternateFileName="MI62D3~1.EVT")) returned 1 [0116.441] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc14341c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc14341c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx", cAlternateFileName="MIEC03~1.EVT")) returned 1 [0116.441] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1b5b23, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1b5b23, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx", cAlternateFileName="MI1F5D~1.EVT")) returned 1 [0116.441] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74ac348, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74ac348, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-TWinUI%4Operational.evtx", cAlternateFileName="MIA925~1.EVT")) returned 1 [0116.462] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50aff605, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50aff605, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-User Profile Service%4Operational.evtx", cAlternateFileName="MI4D4C~1.EVT")) returned 1 [0116.462] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50981e6e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50981e6e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-UserPnp%4ActionCenter.evtx", cAlternateFileName="MI5FF0~1.EVT")) returned 1 [0116.463] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5095bc04, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5095bc04, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-UserPnp%4DeviceInstall.evtx", cAlternateFileName="MIBD88~1.EVT")) returned 1 [0116.463] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b97f64, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b97f64, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx", cAlternateFileName="MICC17~1.EVT")) returned 1 [0116.463] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc986efe1, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc986efe1, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Wcmsvc%4Operational.evtx", cAlternateFileName="MI72BF~1.EVT")) returned 1 [0116.464] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb426548, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb426548, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Windows Defender%4Operational.evtx", cAlternateFileName="MI7501~1.EVT")) returned 1 [0116.464] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb4729e7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb4729e7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Windows Defender%4WHC.evtx", cAlternateFileName="MIF226~1.EVT")) returned 1 [0116.464] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4b19353, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4b19353, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx", cAlternateFileName="MIDCC7~1.EVT")) returned 1 [0116.465] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9c9b1b6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9c9b1b6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx", cAlternateFileName="MI7771~1.EVT")) returned 1 [0116.465] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9df26e9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9df26e9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx", cAlternateFileName="MI4667~1.EVT")) returned 1 [0116.466] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd122d184, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd122d184, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Winlogon%4Operational.evtx", cAlternateFileName="MID6AB~1.EVT")) returned 1 [0116.466] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf164b9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcf164b9b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-WMI-Activity%4Operational.evtx", cAlternateFileName="MIFF83~1.EVT")) returned 1 [0116.466] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9a458f4, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Security.evtx", cAlternateFileName="SECURI~1.EVT")) returned 1 [0116.466] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a6db2c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x95a6db2c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Setup.evtx", cAlternateFileName="SETUP~1.EVT")) returned 1 [0116.467] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505097c4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505097c4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="System.evtx", cAlternateFileName="SYSTEM~1.EVT")) returned 1 [0116.467] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows PowerShell.evtx", cAlternateFileName="WINDOW~1.EVT")) returned 1 [0116.467] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows PowerShell.evtx", cAlternateFileName="WINDOW~1.EVT")) returned 0 [0116.468] FindClose (in: hFindFile=0xaf9638 | out: hFindFile=0xaf9638) returned 1 [0116.470] GetProcessHeap () returned 0xae0000 [0116.470] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb30fb8 | out: hHeap=0xae0000) returned 1 [0116.471] FindNextFileW (in: hFindFile=0xaf98b8, lpFindFileData=0x26af5b0 | out: lpFindFileData=0x26af5b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6e97b025, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6e97b025, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0x47384f2, ftLastWriteTime.dwHighDateTime=0x1d4d600, nFileSizeHigh=0x0, nFileSizeLow=0x28000000, dwReserved0=0xa0000003, dwReserved1=0x745f9fc4, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0116.471] FindNextFileW (in: hFindFile=0xaf98b8, lpFindFileData=0x26af5b0 | out: lpFindFileData=0x26af5b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x745f9fc4, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0116.471] GetProcessHeap () returned 0xae0000 [0116.471] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0xb30fb8 [0116.471] FindFirstFileW (in: lpFileName="\\\\?\\C:\\PerfLogs\\*", lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0xaf91f8 [0116.472] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0116.472] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 0 [0116.472] FindClose (in: hFindFile=0xaf91f8 | out: hFindFile=0xaf91f8) returned 1 [0116.472] GetProcessHeap () returned 0xae0000 [0116.472] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb30fb8 | out: hHeap=0xae0000) returned 1 [0116.472] FindNextFileW (in: hFindFile=0xaf98b8, lpFindFileData=0x26af5b0 | out: lpFindFileData=0x26af5b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x2ad909f6, ftLastAccessTime.dwHighDateTime=0x1d5c098, ftLastWriteTime.dwLowDateTime=0x2ad909f6, ftLastWriteTime.dwHighDateTime=0x1d5c098, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x745f9fc4, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0116.472] GetProcessHeap () returned 0xae0000 [0116.472] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0xb30fb8 [0116.472] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\*", lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x2ad909f6, ftLastAccessTime.dwHighDateTime=0x1d5c098, ftLastWriteTime.dwLowDateTime=0x2ad909f6, ftLastWriteTime.dwHighDateTime=0x1d5c098, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0xaf97f8 [0116.473] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x2ad909f6, ftLastAccessTime.dwHighDateTime=0x1d5c098, ftLastWriteTime.dwLowDateTime=0x2ad909f6, ftLastWriteTime.dwHighDateTime=0x1d5c098, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0116.473] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x26af320 | out: lpFindFileData=0x26af320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1 [0116.473] GetProcessHeap () returned 0xae0000 [0116.473] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3410068 [0116.473] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\*", lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9638 [0116.474] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.474] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESIGNER", cAlternateFileName="")) returned 1 [0116.474] GetProcessHeap () returned 0xae0000 [0116.474] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3420070 [0116.476] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\*", lpFindFileData=0x26aee00 | out: lpFindFileData=0x26aee00*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9838 [0116.477] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x26aee00 | out: lpFindFileData=0x26aee00*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.477] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x26aee00 | out: lpFindFileData=0x26aee00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8c3a00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5c8c3a00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.OLB", cAlternateFileName="")) returned 1 [0116.477] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x26aee00 | out: lpFindFileData=0x26aee00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8c3a00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5c8c3a00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.OLB", cAlternateFileName="")) returned 0 [0116.477] FindClose (in: hFindFile=0xaf9838 | out: hFindFile=0xaf9838) returned 1 [0116.478] GetProcessHeap () returned 0xae0000 [0116.478] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3420070 | out: hHeap=0xae0000) returned 1 [0116.478] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft shared", cAlternateFileName="MICROS~1")) returned 1 [0116.478] GetProcessHeap () returned 0xae0000 [0116.478] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3420070 [0116.478] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\*", lpFindFileData=0x26aee00 | out: lpFindFileData=0x26aee00*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9838 [0116.479] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x26aee00 | out: lpFindFileData=0x26aee00*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.479] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x26aee00 | out: lpFindFileData=0x26aee00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x81028f76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClickToRun", cAlternateFileName="CLICKT~1")) returned 1 [0116.479] GetProcessHeap () returned 0xae0000 [0116.479] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3430078 [0116.480] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\*", lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x81028f76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9138 [0116.481] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x81028f76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.483] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x809e6bf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x809e6bf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1 [0116.483] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x809e6bf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x809e6bf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1 [0116.483] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="API-MS~3.DLL")) returned 1 [0116.484] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="API-MS~4.DLL")) returned 1 [0116.484] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="APF10C~1.DLL")) returned 1 [0116.484] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1 [0116.485] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="APA632~1.DLL")) returned 1 [0116.485] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1 [0116.485] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1 [0116.485] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="APC00F~1.DLL")) returned 1 [0116.486] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="AP0479~1.DLL")) returned 1 [0116.486] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1 [0116.486] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1 [0116.487] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="APAE51~1.DLL")) returned 1 [0116.487] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x68c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1 [0116.488] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1 [0116.488] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="APFCAD~1.DLL")) returned 1 [0116.488] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="AP8F34~1.DLL")) returned 1 [0116.488] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="APD1B7~1.DLL")) returned 1 [0116.489] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="APBF0F~1.DLL")) returned 1 [0116.489] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1 [0116.489] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1 [0116.490] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb979f700, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x27c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApiClient.dll", cAlternateFileName="APICLI~1.DLL")) returned 1 [0116.490] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9bc01200, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0xa02d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVCatalog.dll", cAlternateFileName="APPVCA~1.DLL")) returned 1 [0116.490] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x1f5ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="appvcleaner.exe", cAlternateFileName="APPVCL~1.EXE")) returned 1 [0116.490] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a330a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a330a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x4b0d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVFileSystemMetadata.dll", cAlternateFileName="APPVFI~1.DLL")) returned 1 [0116.492] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a330a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a330a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x2052d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVIntegration.dll", cAlternateFileName="APPVIN~1.DLL")) returned 1 [0116.492] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a59305, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a59305, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x726d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVIsvApi.dll", cAlternateFileName="APPVIS~1.DLL")) returned 1 [0116.493] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe1b7300, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0x60ea0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppvIsvStream32.dll", cAlternateFileName="APPVIS~2.DLL")) returned 1 [0116.493] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb5e67000, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x73aa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppvIsvStream64.dll", cAlternateFileName="APPVIS~3.DLL")) returned 1 [0116.493] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x336d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVIsvStreamingManager.dll", cAlternateFileName="APPVIS~4.DLL")) returned 1 [0116.494] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80aa57b9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80aa57b9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x1566d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVIsvSubsystemController.dll", cAlternateFileName="AP213A~1.DLL")) returned 1 [0116.494] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80aa57b9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80aa57b9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x18d60800, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0x1ae0a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppvIsvSubsystems32.dll", cAlternateFileName="AP3342~1.DLL")) returned 1 [0116.494] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80acba0b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80acba0b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbbdc5100, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x22e0a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppvIsvSubsystems64.dll", cAlternateFileName="AP4400~1.DLL")) returned 1 [0116.494] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80af1c6a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80af1c6a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x8a8d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVIsvVirtualization.dll", cAlternateFileName="AP485B~1.DLL")) returned 1 [0116.495] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80af1c6a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80af1c6a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x12cad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVManifest.dll", cAlternateFileName="APPVMA~1.DLL")) returned 1 [0116.495] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b17ebf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b17ebf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0xe76d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVOrchestration.dll", cAlternateFileName="APPVOR~1.DLL")) returned 1 [0116.496] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b17ebf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b17ebf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x13c4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVPolicy.dll", cAlternateFileName="APPVPO~1.DLL")) returned 1 [0116.496] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b17ebf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b17ebf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9e226c00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x7d0d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVScripting.dll", cAlternateFileName="APPVSC~1.DLL")) returned 1 [0116.496] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9e226c00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x406d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVShNotify.exe", cAlternateFileName="APPVSH~1.EXE")) returned 1 [0116.496] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x14115400, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0xc84c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2R32.dll", cAlternateFileName="")) returned 1 [0116.497] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb4b54300, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x127260, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2R64.dll", cAlternateFileName="")) returned 1 [0116.497] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8ee04f00, ftLastWriteTime.dwHighDateTime=0x1d0d67f, nFileSizeHigh=0x0, nFileSizeLow=0x1028, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RHeartbeatConfig.xml", cAlternateFileName="C2RHEA~1.XML")) returned 1 [0116.497] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb3841600, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RUI.en-us.dll", cAlternateFileName="C2RUIE~1.DLL")) returned 1 [0116.498] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x514a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1 [0116.498] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbd783a00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="i640.hash", cAlternateFileName="I640~1.HAS")) returned 1 [0116.498] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbc470d00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="i641033.hash", cAlternateFileName="I64103~1.HAS")) returned 1 [0116.499] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x10ae80, dwReserved0=0x0, dwReserved1=0x0, cFileName="IntegratedOffice.exe", cAlternateFileName="INTEGR~1.EXE")) returned 1 [0116.499] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b8a5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b8a5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xa2e72000, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x578d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MavInject32.exe", cAlternateFileName="MAVINJ~1.EXE")) returned 1 [0116.499] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b8a5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b8a5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8745c00, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0x2ffa60, dwReserved0=0x0, dwReserved1=0x0, cFileName="mso20win32client.dll", cAlternateFileName="MSO20W~1.DLL")) returned 1 [0116.499] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80bb0837, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80bb0837, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xad6b600, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0x475e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="mso30win32client.dll", cAlternateFileName="MSO30W~1.DLL")) returned 1 [0116.500] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80bfccf1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80bfccf1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x307ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mso40uires.dll", cAlternateFileName="MSO40U~1.DLL")) returned 1 [0116.500] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c22f4a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80c22f4a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x10cc9700, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0x8e6060, dwReserved0=0x0, dwReserved1=0x0, cFileName="mso40uiwin32client.dll", cAlternateFileName="MSO40U~2.DLL")) returned 1 [0116.500] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x11fdc400, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0xee60, dwReserved0=0x0, dwReserved1=0x0, cFileName="msointl30.en-us.dll", cAlternateFileName="MSOINT~1.DLL")) returned 1 [0116.501] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c9565a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80c9565a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1909ea00, ftLastWriteTime.dwHighDateTime=0x1d098bf, nFileSizeHigh=0x0, nFileSizeLow=0xa12a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1 [0116.501] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x9b0a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1 [0116.501] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b6c4400, ftLastWriteTime.dwHighDateTime=0x1d098bf, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1 [0116.502] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x5b1068, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeC2RClient.exe", cAlternateFileName="OFFICE~1.EXE")) returned 1 [0116.502] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d07d85, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d07d85, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0xf34d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeC2RCom.dll", cAlternateFileName="OFFICE~1.DLL")) returned 1 [0116.502] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d07d85, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d07d85, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbd0d7e00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x2a5e58, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeClickToRun.exe", cAlternateFileName="OFFICE~2.EXE")) returned 1 [0116.503] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3f141b52, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x12ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeUpdateSchedule.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0116.503] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3fa7ec8f, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x1162, dwReserved0=0x0, dwReserved1=0x0, cFileName="ServiceWatcherSchedule.xml", cAlternateFileName="SERVIC~1.XML")) returned 1 [0116.503] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x101458, dwReserved0=0x0, dwReserved1=0x0, cFileName="StreamServer.dll", cAlternateFileName="STREAM~1.DLL")) returned 1 [0116.504] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0xefec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ucrtbase.dll", cAlternateFileName="")) returned 1 [0116.504] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d7a486, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d7a486, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x5f4b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vccorlib140.dll", cAlternateFileName="VCCORL~1.DLL")) returned 1 [0116.504] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d7a486, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d7a486, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1 [0116.505] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d7a486, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d7a486, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 0 [0116.505] FindClose (in: hFindFile=0xaf9138 | out: hFindFile=0xaf9138) returned 1 [0116.505] GetProcessHeap () returned 0xae0000 [0116.505] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3430078 | out: hHeap=0xae0000) returned 1 [0116.505] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x26aee00 | out: lpFindFileData=0x26aee00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ink", cAlternateFileName="")) returned 1 [0116.505] GetProcessHeap () returned 0xae0000 [0116.505] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3430078 [0116.506] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\*", lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91f8 [0116.960] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.960] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe462e472, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe462e472, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xc137d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Alphabet.xml", cAlternateFileName="")) returned 1 [0116.960] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05532b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-SA", cAlternateFileName="")) returned 1 [0116.961] GetProcessHeap () returned 0xae0000 [0116.961] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3461098 [0116.962] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\*", lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05532b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0116.962] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05532b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.962] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0116.963] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0116.963] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0116.963] GetProcessHeap () returned 0xae0000 [0116.963] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3461098 | out: hHeap=0xae0000) returned 1 [0116.963] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0116.963] GetProcessHeap () returned 0xae0000 [0116.963] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3461098 [0116.964] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\*", lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0116.964] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.964] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0116.964] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0116.964] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0116.965] GetProcessHeap () returned 0xae0000 [0116.965] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3461098 | out: hHeap=0xae0000) returned 1 [0116.965] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x69a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content.xml", cAlternateFileName="")) returned 1 [0116.965] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0554b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0116.965] GetProcessHeap () returned 0xae0000 [0116.965] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3461098 [0116.965] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\*", lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0554b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0116.965] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0554b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.966] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e316e09, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e316e09, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e316e09, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0116.966] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e316e09, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e316e09, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e316e09, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0116.966] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0116.966] GetProcessHeap () returned 0xae0000 [0116.966] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3461098 | out: hHeap=0xae0000) returned 1 [0116.966] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0116.967] GetProcessHeap () returned 0xae0000 [0116.967] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3461098 [0116.967] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\*", lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0116.967] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.967] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2f0ba2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2f0ba2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2f0ba2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0116.967] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2f0ba2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2f0ba2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2f0ba2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0116.968] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0116.968] GetProcessHeap () returned 0xae0000 [0116.968] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3461098 | out: hHeap=0xae0000) returned 1 [0116.968] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0116.968] GetProcessHeap () returned 0xae0000 [0116.968] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3461098 [0116.968] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\*", lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0116.968] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.968] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2f0ba2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2f0ba2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2f0ba2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0116.969] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2f0ba2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2f0ba2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2f0ba2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0116.969] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0116.969] GetProcessHeap () returned 0xae0000 [0116.969] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3461098 | out: hHeap=0xae0000) returned 1 [0116.969] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0116.969] GetProcessHeap () returned 0xae0000 [0116.969] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3461098 [0116.970] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\*", lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0116.970] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.970] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0116.970] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0116.970] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0116.970] GetProcessHeap () returned 0xae0000 [0116.970] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3461098 | out: hHeap=0xae0000) returned 1 [0116.971] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0557085, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB", cAlternateFileName="")) returned 1 [0116.971] GetProcessHeap () returned 0xae0000 [0116.971] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3461098 [0116.971] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\*", lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0557085, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0116.971] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0557085, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.971] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0116.972] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0116.972] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0116.972] GetProcessHeap () returned 0xae0000 [0116.972] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3461098 | out: hHeap=0xae0000) returned 1 [0116.972] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dd09d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0116.972] GetProcessHeap () returned 0xae0000 [0116.972] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3461098 [0116.972] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\*", lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dd09d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0116.975] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dd09d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.975] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a3b058, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a3b058, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1b2d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-correct.avi", cAlternateFileName="")) returned 1 [0116.975] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a612b1, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a612b1, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xbf28, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-delete.avi", cAlternateFileName="")) returned 1 [0116.976] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a1d507, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1aad768, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1aad768, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb61e, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-join.avi", cAlternateFileName="")) returned 1 [0116.976] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x148de, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-split.avi", cAlternateFileName="")) returned 1 [0116.977] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2bfcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="correct.avi", cAlternateFileName="")) returned 1 [0116.977] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a612b1, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a612b1, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x32e18, dwReserved0=0x0, dwReserved1=0x0, cFileName="delete.avi", cAlternateFileName="")) returned 1 [0116.977] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da3ec5f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7bf3d600, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickLearningWizard.exe.mui", cAlternateFileName="")) returned 1 [0116.977] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dab1374, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7e563000, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll.mui", cAlternateFileName="")) returned 1 [0116.978] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d9f27a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7f875d00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization.exe.mui", cAlternateFileName="")) returned 1 [0116.978] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d9f27a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7f875d00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPSEventLogMsg.dll.mui", cAlternateFileName="")) returned 1 [0116.978] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da18a06, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x80b88a00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsMigrationPlugin.dll.mui", cAlternateFileName="")) returned 1 [0116.979] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a1d507, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1af9c24, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1af9c24, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x30d3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="join.avi", cAlternateFileName="")) returned 1 [0116.979] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7e563000, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll.mui", cAlternateFileName="")) returned 1 [0116.980] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da8b116, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7d250300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mip.exe.mui", cAlternateFileName="")) returned 1 [0116.980] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da18a06, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x80b88a00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll.mui", cAlternateFileName="")) returned 1 [0116.980] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dab1374, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7e563000, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll.mui", cAlternateFileName="")) returned 1 [0116.980] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da18a06, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7f875d00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.exe.mui", cAlternateFileName="")) returned 1 [0116.981] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2c6cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="split.avi", cAlternateFileName="")) returned 1 [0116.981] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7e563000, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="tabskb.dll.mui", cAlternateFileName="")) returned 1 [0116.981] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da8b116, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7d250300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabTip.exe.mui", cAlternateFileName="")) returned 1 [0116.982] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ffe6194, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7c896e00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x6200, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipRes.dll.mui", cAlternateFileName="")) returned 1 [0116.982] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0116.982] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7d250300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 1 [0116.983] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7d250300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 0 [0116.983] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0116.985] GetProcessHeap () returned 0xae0000 [0116.985] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3461098 | out: hHeap=0xae0000) returned 1 [0116.985] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05ddf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0116.985] GetProcessHeap () returned 0xae0000 [0116.985] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3461098 [0116.985] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\*", lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05ddf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0116.986] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05ddf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.986] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0116.986] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0116.986] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0116.986] GetProcessHeap () returned 0xae0000 [0116.987] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3461098 | out: hHeap=0xae0000) returned 1 [0116.987] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-MX", cAlternateFileName="")) returned 1 [0116.987] GetProcessHeap () returned 0xae0000 [0116.987] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3461098 [0116.987] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\*", lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0116.987] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.987] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2a46df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2a46df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2a46df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0116.988] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2a46df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2a46df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2a46df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0116.988] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0116.988] GetProcessHeap () returned 0xae0000 [0116.988] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3461098 | out: hHeap=0xae0000) returned 1 [0116.988] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et-EE", cAlternateFileName="")) returned 1 [0116.988] GetProcessHeap () returned 0xae0000 [0116.988] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3461098 [0116.988] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\*", lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0116.989] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.989] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0116.989] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0116.989] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0116.989] GetProcessHeap () returned 0xae0000 [0116.989] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3461098 | out: hHeap=0xae0000) returned 1 [0116.989] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0116.990] GetProcessHeap () returned 0xae0000 [0116.990] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3461098 [0116.990] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\*", lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0116.990] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.990] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0116.990] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0116.991] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0116.991] GetProcessHeap () returned 0xae0000 [0116.991] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3461098 | out: hHeap=0xae0000) returned 1 [0116.991] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8f49e8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd11f8841, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd11f8841, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x186b84, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickAnimation.avi", cAlternateFileName="")) returned 1 [0117.664] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8f49e8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd121ea9a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd121ea9a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xc4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickLearningWizard.exe", cAlternateFileName="")) returned 1 [0117.664] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0635c03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-CA", cAlternateFileName="")) returned 1 [0117.664] GetProcessHeap () returned 0xae0000 [0117.664] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3461098 [0117.665] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\*", lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0635c03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0117.666] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0635c03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.666] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e126ecb, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e126ecb, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e126ecb, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0117.666] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e126ecb, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e126ecb, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e126ecb, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0117.666] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0117.666] GetProcessHeap () returned 0xae0000 [0117.666] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3461098 | out: hHeap=0xae0000) returned 1 [0117.667] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0117.667] GetProcessHeap () returned 0xae0000 [0117.667] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3461098 [0117.667] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\*", lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0117.667] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.667] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0117.668] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0117.668] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0117.668] GetProcessHeap () returned 0xae0000 [0117.668] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3461098 | out: hHeap=0xae0000) returned 1 [0117.668] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fsdefinitions", cAlternateFileName="FSDEFI~1")) returned 1 [0117.668] GetProcessHeap () returned 0xae0000 [0117.668] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3461098 [0117.668] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\*", lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0117.669] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.669] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638633, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxpad", cAlternateFileName="")) returned 1 [0117.669] GetProcessHeap () returned 0xae0000 [0117.669] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34730b0 [0117.670] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\*", lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638633, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3472cd8 [0117.671] FindNextFileW (in: hFindFile=0x3472cd8, lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638633, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.671] FindNextFileW (in: hFindFile=0x3472cd8, lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxbase.xml", cAlternateFileName="")) returned 1 [0117.671] FindNextFileW (in: hFindFile=0x3472cd8, lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxbase.xml", cAlternateFileName="")) returned 0 [0117.671] FindClose (in: hFindFile=0x3472cd8 | out: hFindFile=0x3472cd8) returned 1 [0117.672] GetProcessHeap () returned 0xae0000 [0117.672] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34730b0 | out: hHeap=0xae0000) returned 1 [0117.672] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxpad.xml", cAlternateFileName="")) returned 1 [0117.672] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638c00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="insert", cAlternateFileName="")) returned 1 [0117.672] GetProcessHeap () returned 0xae0000 [0117.672] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34730b0 [0117.672] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\*", lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638c00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3472298 [0117.673] FindNextFileW (in: hFindFile=0x3472298, lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638c00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.673] FindNextFileW (in: hFindFile=0x3472298, lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x387, dwReserved0=0x0, dwReserved1=0x0, cFileName="insertbase.xml", cAlternateFileName="")) returned 1 [0117.673] FindNextFileW (in: hFindFile=0x3472298, lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x387, dwReserved0=0x0, dwReserved1=0x0, cFileName="insertbase.xml", cAlternateFileName="")) returned 0 [0117.673] FindClose (in: hFindFile=0x3472298 | out: hFindFile=0x3472298) returned 1 [0117.673] GetProcessHeap () returned 0xae0000 [0117.673] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34730b0 | out: hHeap=0xae0000) returned 1 [0117.673] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="insert.xml", cAlternateFileName="")) returned 1 [0117.674] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa063932e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypad", cAlternateFileName="")) returned 1 [0117.674] GetProcessHeap () returned 0xae0000 [0117.674] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34730b0 [0117.674] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\*", lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa063932e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3472558 [0117.674] FindNextFileW (in: hFindFile=0x3472558, lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa063932e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.674] FindNextFileW (in: hFindFile=0x3472558, lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0x0, dwReserved1=0x0, cFileName="ea.xml", cAlternateFileName="")) returned 1 [0117.675] FindNextFileW (in: hFindFile=0x3472558, lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x387, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypadbase.xml", cAlternateFileName="")) returned 1 [0117.675] FindNextFileW (in: hFindFile=0x3472558, lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor-kor.xml", cAlternateFileName="")) returned 1 [0117.676] FindNextFileW (in: hFindFile=0x3472558, lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor-kor.xml", cAlternateFileName="")) returned 0 [0117.676] FindClose (in: hFindFile=0x3472558 | out: hFindFile=0x3472558) returned 1 [0117.676] GetProcessHeap () returned 0xae0000 [0117.676] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34730b0 | out: hHeap=0xae0000) returned 1 [0117.676] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypad.xml", cAlternateFileName="")) returned 1 [0117.676] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cd023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="main", cAlternateFileName="")) returned 1 [0117.677] GetProcessHeap () returned 0xae0000 [0117.677] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34730b0 [0117.677] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\*", lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cd023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3472e18 [0117.681] FindNextFileW (in: hFindFile=0x3472e18, lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cd023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.681] FindNextFileW (in: hFindFile=0x3472e18, lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd05, dwReserved0=0x0, dwReserved1=0x0, cFileName="base.xml", cAlternateFileName="")) returned 1 [0117.681] FindNextFileW (in: hFindFile=0x3472e18, lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="baseAltGr_rtl.xml", cAlternateFileName="")) returned 1 [0117.681] FindNextFileW (in: hFindFile=0x3472e18, lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_altgr.xml", cAlternateFileName="")) returned 1 [0117.682] FindNextFileW (in: hFindFile=0x3472e18, lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_ca.xml", cAlternateFileName="")) returned 1 [0117.682] FindNextFileW (in: hFindFile=0x3472e18, lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_heb.xml", cAlternateFileName="")) returned 1 [0117.682] FindNextFileW (in: hFindFile=0x3472e18, lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_jpn.xml", cAlternateFileName="")) returned 1 [0117.683] FindNextFileW (in: hFindFile=0x3472e18, lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_kor.xml", cAlternateFileName="")) returned 1 [0117.683] FindNextFileW (in: hFindFile=0x3472e18, lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_rtl.xml", cAlternateFileName="")) returned 1 [0117.683] FindNextFileW (in: hFindFile=0x3472e18, lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x40e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp.xml", cAlternateFileName="")) returned 1 [0117.684] FindNextFileW (in: hFindFile=0x3472e18, lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3af9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr.xml", cAlternateFileName="")) returned 1 [0117.684] FindNextFileW (in: hFindFile=0x3472e18, lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x264b, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-changjei.xml", cAlternateFileName="")) returned 1 [0117.684] FindNextFileW (in: hFindFile=0x3472e18, lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-dayi.xml", cAlternateFileName="")) returned 1 [0117.684] FindNextFileW (in: hFindFile=0x3472e18, lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 1 [0117.685] FindNextFileW (in: hFindFile=0x3472e18, lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 0 [0117.685] FindClose (in: hFindFile=0x3472e18 | out: hFindFile=0x3472e18) returned 1 [0117.687] GetProcessHeap () returned 0xae0000 [0117.687] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34730b0 | out: hHeap=0xae0000) returned 1 [0117.688] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xadda, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.xml", cAlternateFileName="")) returned 1 [0117.688] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cdb88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskclearui", cAlternateFileName="OSKCLE~1")) returned 1 [0117.688] GetProcessHeap () returned 0xae0000 [0117.688] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34730b0 [0117.688] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\*", lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cdb88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3472ed8 [0117.688] FindNextFileW (in: hFindFile=0x3472ed8, lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cdb88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.689] FindNextFileW (in: hFindFile=0x3472ed8, lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskclearuibase.xml", cAlternateFileName="")) returned 1 [0117.689] FindNextFileW (in: hFindFile=0x3472ed8, lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskclearuibase.xml", cAlternateFileName="")) returned 0 [0117.689] FindClose (in: hFindFile=0x3472ed8 | out: hFindFile=0x3472ed8) returned 1 [0117.689] GetProcessHeap () returned 0xae0000 [0117.689] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34730b0 | out: hHeap=0xae0000) returned 1 [0117.689] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskclearui.xml", cAlternateFileName="")) returned 1 [0117.690] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenu", cAlternateFileName="")) returned 1 [0117.690] GetProcessHeap () returned 0xae0000 [0117.690] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34730b0 [0117.690] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\*", lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34720d8 [0117.690] FindNextFileW (in: hFindFile=0x34720d8, lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.690] FindNextFileW (in: hFindFile=0x34720d8, lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 1 [0117.691] FindNextFileW (in: hFindFile=0x34720d8, lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 0 [0117.691] FindClose (in: hFindFile=0x34720d8 | out: hFindFile=0x34720d8) returned 1 [0117.691] GetProcessHeap () returned 0xae0000 [0117.691] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34730b0 | out: hHeap=0xae0000) returned 1 [0117.691] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenu.xml", cAlternateFileName="")) returned 1 [0117.691] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce7a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknav", cAlternateFileName="")) returned 1 [0117.692] GetProcessHeap () returned 0xae0000 [0117.692] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34730b0 [0117.692] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\*", lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce7a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3472218 [0117.692] FindNextFileW (in: hFindFile=0x3472218, lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce7a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.692] FindNextFileW (in: hFindFile=0x3472218, lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknavbase.xml", cAlternateFileName="")) returned 1 [0117.692] FindNextFileW (in: hFindFile=0x3472218, lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknavbase.xml", cAlternateFileName="")) returned 0 [0117.692] FindClose (in: hFindFile=0x3472218 | out: hFindFile=0x3472218) returned 1 [0117.693] GetProcessHeap () returned 0xae0000 [0117.693] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34730b0 | out: hHeap=0xae0000) returned 1 [0117.693] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknav.xml", cAlternateFileName="")) returned 1 [0117.693] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ceb7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpad", cAlternateFileName="OSKNUM~1")) returned 1 [0117.693] GetProcessHeap () returned 0xae0000 [0117.693] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34730b0 [0117.693] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\*", lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ceb7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3472518 [0117.694] FindNextFileW (in: hFindFile=0x3472518, lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ceb7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.694] FindNextFileW (in: hFindFile=0x3472518, lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x73d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 1 [0117.695] FindNextFileW (in: hFindFile=0x3472518, lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x73d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 0 [0117.695] FindClose (in: hFindFile=0x3472518 | out: hFindFile=0x3472518) returned 1 [0117.695] GetProcessHeap () returned 0xae0000 [0117.695] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34730b0 | out: hHeap=0xae0000) returned 1 [0117.695] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpad.xml", cAlternateFileName="")) returned 1 [0117.695] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cef41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpred", cAlternateFileName="")) returned 1 [0117.696] GetProcessHeap () returned 0xae0000 [0117.696] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34730b0 [0117.696] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\*", lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cef41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3472918 [0117.696] FindNextFileW (in: hFindFile=0x3472918, lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cef41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.696] FindNextFileW (in: hFindFile=0x3472918, lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 1 [0117.696] FindNextFileW (in: hFindFile=0x3472918, lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 0 [0117.696] FindClose (in: hFindFile=0x3472918 | out: hFindFile=0x3472918) returned 1 [0117.697] GetProcessHeap () returned 0xae0000 [0117.697] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34730b0 | out: hHeap=0xae0000) returned 1 [0117.697] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpred.xml", cAlternateFileName="")) returned 1 [0117.697] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf371, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols", cAlternateFileName="")) returned 1 [0117.697] GetProcessHeap () returned 0xae0000 [0117.697] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34730b0 [0117.697] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\*", lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf371, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3472498 [0117.698] FindNextFileW (in: hFindFile=0x3472498, lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf371, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.698] FindNextFileW (in: hFindFile=0x3472498, lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ea-sym.xml", cAlternateFileName="")) returned 1 [0117.698] FindNextFileW (in: hFindFile=0x3472498, lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x325, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp-sym.xml", cAlternateFileName="")) returned 1 [0117.698] FindNextFileW (in: hFindFile=0x3472498, lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeef, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbase.xml", cAlternateFileName="")) returned 1 [0117.699] FindNextFileW (in: hFindFile=0x3472498, lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeef, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbase.xml", cAlternateFileName="")) returned 0 [0117.699] FindClose (in: hFindFile=0x3472498 | out: hFindFile=0x3472498) returned 1 [0117.699] GetProcessHeap () returned 0xae0000 [0117.699] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34730b0 | out: hHeap=0xae0000) returned 1 [0117.699] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols.xml", cAlternateFileName="")) returned 1 [0117.699] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols.xml", cAlternateFileName="")) returned 0 [0117.699] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0117.700] GetProcessHeap () returned 0xae0000 [0117.700] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3461098 | out: hHeap=0xae0000) returned 1 [0117.701] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-IL", cAlternateFileName="")) returned 1 [0117.702] GetProcessHeap () returned 0xae0000 [0117.702] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3461098 [0117.702] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\*", lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0117.703] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.703] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0117.703] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0117.703] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0117.703] GetProcessHeap () returned 0xae0000 [0117.703] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3461098 | out: hHeap=0xae0000) returned 1 [0117.704] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-HR", cAlternateFileName="")) returned 1 [0117.704] GetProcessHeap () returned 0xae0000 [0117.704] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3461098 [0117.704] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\*", lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0117.704] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.704] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0117.704] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0117.705] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0117.705] GetProcessHeap () returned 0xae0000 [0117.705] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3461098 | out: hHeap=0xae0000) returned 1 [0117.705] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0117.705] GetProcessHeap () returned 0xae0000 [0117.705] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3461098 [0117.705] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\*", lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0117.705] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.706] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0117.706] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0117.706] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0117.706] GetProcessHeap () returned 0xae0000 [0117.706] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3461098 | out: hHeap=0xae0000) returned 1 [0117.706] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe382bd1f, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe382bd1f, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb620, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrcommonlm.dat", cAlternateFileName="")) returned 1 [0117.707] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HWRCustomization", cAlternateFileName="HWRCUS~1")) returned 1 [0117.707] GetProcessHeap () returned 0xae0000 [0117.707] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3461098 [0117.707] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\HWRCustomization\\*", lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0117.708] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.708] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0117.708] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0117.708] GetProcessHeap () returned 0xae0000 [0117.708] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3461098 | out: hHeap=0xae0000) returned 1 [0117.708] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85c57278, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb269cdea, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb269cdea, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x79bc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrenclm.dat", cAlternateFileName="")) returned 1 [0117.708] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe38781cd, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe38781cd, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x10cb30, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrlatinlm.dat", cAlternateFileName="")) returned 1 [0117.709] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85cc99ae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb28b2edf, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb28b2edf, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2662f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrusalm.dat", cAlternateFileName="")) returned 1 [0117.709] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85cc99ae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb281a570, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb281a570, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x339380, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrusash.dat", cAlternateFileName="")) returned 1 [0117.709] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x58400, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkDiv.dll", cAlternateFileName="")) returned 1 [0118.304] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1ecc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll", cAlternateFileName="")) returned 1 [0118.305] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe467a929, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe467a929, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x59a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization.exe", cAlternateFileName="")) returned 1 [0118.305] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x972, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsar.xml", cAlternateFileName="")) returned 1 [0118.305] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa20, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscat.xml", cAlternateFileName="")) returned 1 [0118.306] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x99e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipschs.xml", cAlternateFileName="")) returned 1 [0118.306] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscht.xml", cAlternateFileName="")) returned 1 [0118.306] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscsy.xml", cAlternateFileName="")) returned 1 [0118.307] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsdan.xml", cAlternateFileName="")) returned 1 [0118.307] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsdeu.xml", cAlternateFileName="")) returned 1 [0118.307] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsel.xml", cAlternateFileName="")) returned 1 [0118.308] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsen.xml", cAlternateFileName="")) returned 1 [0118.308] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xbd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsesp.xml", cAlternateFileName="")) returned 1 [0118.309] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d14d081, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d14d081, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPSEventLogMsg.dll", cAlternateFileName="")) returned 1 [0118.309] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa62, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsfin.xml", cAlternateFileName="")) returned 1 [0118.309] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa44, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsfra.xml", cAlternateFileName="")) returned 1 [0118.310] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipshe.xml", cAlternateFileName="")) returned 1 [0118.310] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipshi.xml", cAlternateFileName="")) returned 1 [0118.310] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c96711d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipshrv.xml", cAlternateFileName="")) returned 1 [0118.311] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d14d081, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d14d081, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsid.xml", cAlternateFileName="")) returned 1 [0118.311] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9de, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsita.xml", cAlternateFileName="")) returned 1 [0118.311] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c96711d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c96711d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c96711d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9da, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsjpn.xml", cAlternateFileName="")) returned 1 [0118.312] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipskor.xml", cAlternateFileName="")) returned 1 [0118.312] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe462e472, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe462e472, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsMigrationPlugin.dll", cAlternateFileName="")) returned 1 [0118.312] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsnld.xml", cAlternateFileName="")) returned 1 [0118.313] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa14, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsnor.xml", cAlternateFileName="")) returned 1 [0118.313] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa28, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsplk.xml", cAlternateFileName="")) returned 1 [0118.313] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1ec00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsPlugin.dll", cAlternateFileName="")) returned 1 [0118.313] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsptb.xml", cAlternateFileName="")) returned 1 [0118.314] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsptg.xml", cAlternateFileName="")) returned 1 [0118.314] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c96711d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c96711d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c96711d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsrom.xml", cAlternateFileName="")) returned 1 [0118.314] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsrus.xml", cAlternateFileName="")) returned 1 [0118.315] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssrb.xml", cAlternateFileName="")) returned 1 [0118.315] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssrl.xml", cAlternateFileName="")) returned 1 [0118.315] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssve.xml", cAlternateFileName="")) returned 1 [0118.316] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xaa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipstr.xml", cAlternateFileName="")) returned 1 [0118.316] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0769b1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0118.316] GetProcessHeap () returned 0xae0000 [0118.316] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34620a0 [0118.316] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\*", lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0769b1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3472fd8 [0118.317] FindNextFileW (in: hFindFile=0x3472fd8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0769b1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.318] FindNextFileW (in: hFindFile=0x3472fd8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0118.318] FindNextFileW (in: hFindFile=0x3472fd8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0118.318] FindClose (in: hFindFile=0x3472fd8 | out: hFindFile=0x3472fd8) returned 1 [0118.319] GetProcessHeap () returned 0xae0000 [0118.319] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34620a0 | out: hHeap=0xae0000) returned 1 [0118.319] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0118.319] GetProcessHeap () returned 0xae0000 [0118.319] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34620a0 [0118.320] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\*", lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3472118 [0118.320] FindNextFileW (in: hFindFile=0x3472118, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.321] FindNextFileW (in: hFindFile=0x3472118, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0118.321] FindNextFileW (in: hFindFile=0x3472118, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0118.321] FindClose (in: hFindFile=0x3472118 | out: hFindFile=0x3472118) returned 1 [0118.321] GetProcessHeap () returned 0xae0000 [0118.321] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34620a0 | out: hHeap=0xae0000) returned 1 [0118.321] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0118.321] GetProcessHeap () returned 0xae0000 [0118.322] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34620a0 [0118.322] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\*", lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3472298 [0118.322] FindNextFileW (in: hFindFile=0x3472298, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.322] FindNextFileW (in: hFindFile=0x3472298, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0118.322] FindNextFileW (in: hFindFile=0x3472298, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0118.322] FindClose (in: hFindFile=0x3472298 | out: hFindFile=0x3472298) returned 1 [0118.323] GetProcessHeap () returned 0xae0000 [0118.323] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34620a0 | out: hHeap=0xae0000) returned 1 [0118.323] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LanguageModel", cAlternateFileName="LANGUA~1")) returned 1 [0118.323] GetProcessHeap () returned 0xae0000 [0118.323] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34620a0 [0118.323] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\*", lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3472158 [0118.323] FindNextFileW (in: hFindFile=0x3472158, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.323] FindNextFileW (in: hFindFile=0x3472158, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="chstic.dgml", cAlternateFileName="")) returned 1 [0118.324] FindNextFileW (in: hFindFile=0x3472158, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="chstic.dgml", cAlternateFileName="")) returned 0 [0118.324] FindClose (in: hFindFile=0x3472158 | out: hFindFile=0x3472158) returned 1 [0118.324] GetProcessHeap () returned 0xae0000 [0118.324] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34620a0 | out: hHeap=0xae0000) returned 1 [0118.324] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt-LT", cAlternateFileName="")) returned 1 [0118.324] GetProcessHeap () returned 0xae0000 [0118.325] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34620a0 [0118.325] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\*", lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3472f98 [0118.325] FindNextFileW (in: hFindFile=0x3472f98, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.325] FindNextFileW (in: hFindFile=0x3472f98, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0118.325] FindNextFileW (in: hFindFile=0x3472f98, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0118.325] FindClose (in: hFindFile=0x3472f98 | out: hFindFile=0x3472f98) returned 1 [0118.326] GetProcessHeap () returned 0xae0000 [0118.326] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34620a0 | out: hHeap=0xae0000) returned 1 [0118.326] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv-LV", cAlternateFileName="")) returned 1 [0118.326] GetProcessHeap () returned 0xae0000 [0118.326] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34620a0 [0118.326] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\*", lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3472b18 [0118.326] FindNextFileW (in: hFindFile=0x3472b18, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.326] FindNextFileW (in: hFindFile=0x3472b18, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0118.327] FindNextFileW (in: hFindFile=0x3472b18, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0118.327] FindClose (in: hFindFile=0x3472b18 | out: hFindFile=0x3472b18) returned 1 [0118.327] GetProcessHeap () returned 0xae0000 [0118.327] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34620a0 | out: hHeap=0xae0000) returned 1 [0118.327] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a4376e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1f30e81, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1f30e81, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x19f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll", cAlternateFileName="")) returned 1 [0118.327] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463d4edd, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xc2004e62, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463d4edd, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x7b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Ink.dll", cAlternateFileName="")) returned 1 [0118.328] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a4376e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd51e08b5, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd51e08b5, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x178200, dwReserved0=0x0, dwReserved1=0x0, cFileName="mip.exe", cAlternateFileName="")) returned 1 [0118.328] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a1d507, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xde1acd8d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xde1acd8d, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x612e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mraut.dll", cAlternateFileName="")) returned 1 [0118.328] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwgst.dll", cAlternateFileName="")) returned 1 [0118.329] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe3805ad4, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe3805ad4, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x106a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll", cAlternateFileName="")) returned 1 [0118.329] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0118.329] GetProcessHeap () returned 0xae0000 [0118.329] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34620a0 [0118.329] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\*", lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34722d8 [0118.329] FindNextFileW (in: hFindFile=0x34722d8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.330] FindNextFileW (in: hFindFile=0x34722d8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e90ce26, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e90ce26, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e90ce26, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0118.330] FindNextFileW (in: hFindFile=0x34722d8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e90ce26, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e90ce26, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e90ce26, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0118.330] FindClose (in: hFindFile=0x34722d8 | out: hFindFile=0x34722d8) returned 1 [0118.330] GetProcessHeap () returned 0xae0000 [0118.330] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34620a0 | out: hHeap=0xae0000) returned 1 [0118.330] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0118.331] GetProcessHeap () returned 0xae0000 [0118.331] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34620a0 [0118.331] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\*", lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3472518 [0118.331] FindNextFileW (in: hFindFile=0x3472518, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.331] FindNextFileW (in: hFindFile=0x3472518, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0118.331] FindNextFileW (in: hFindFile=0x3472518, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0118.331] FindClose (in: hFindFile=0x3472518 | out: hFindFile=0x3472518) returned 1 [0118.332] GetProcessHeap () returned 0xae0000 [0118.332] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34620a0 | out: hHeap=0xae0000) returned 1 [0118.332] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0118.332] GetProcessHeap () returned 0xae0000 [0118.332] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34620a0 [0118.332] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\*", lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3472b18 [0118.332] FindNextFileW (in: hFindFile=0x3472b18, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.332] FindNextFileW (in: hFindFile=0x3472b18, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0118.334] FindNextFileW (in: hFindFile=0x3472b18, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0118.334] FindClose (in: hFindFile=0x3472b18 | out: hFindFile=0x3472b18) returned 1 [0118.334] GetProcessHeap () returned 0xae0000 [0118.334] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34620a0 | out: hHeap=0xae0000) returned 1 [0118.335] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0118.335] GetProcessHeap () returned 0xae0000 [0118.335] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34620a0 [0118.336] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\*", lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3472418 [0118.336] FindNextFileW (in: hFindFile=0x3472418, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.336] FindNextFileW (in: hFindFile=0x3472418, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0118.336] FindNextFileW (in: hFindFile=0x3472418, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0118.336] FindClose (in: hFindFile=0x3472418 | out: hFindFile=0x3472418) returned 1 [0118.337] GetProcessHeap () returned 0xae0000 [0118.337] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34620a0 | out: hHeap=0xae0000) returned 1 [0118.337] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0118.337] GetProcessHeap () returned 0xae0000 [0118.337] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34620a0 [0118.337] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\*", lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3472158 [0118.337] FindNextFileW (in: hFindFile=0x3472158, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.337] FindNextFileW (in: hFindFile=0x3472158, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0118.338] FindNextFileW (in: hFindFile=0x3472158, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0118.338] FindClose (in: hFindFile=0x3472158 | out: hFindFile=0x3472158) returned 1 [0118.338] GetProcessHeap () returned 0xae0000 [0118.338] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34620a0 | out: hHeap=0xae0000) returned 1 [0118.338] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-RO", cAlternateFileName="")) returned 1 [0118.338] GetProcessHeap () returned 0xae0000 [0118.338] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34620a0 [0118.338] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\*", lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3472a98 [0118.339] FindNextFileW (in: hFindFile=0x3472a98, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.339] FindNextFileW (in: hFindFile=0x3472a98, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0118.339] FindNextFileW (in: hFindFile=0x3472a98, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0118.339] FindClose (in: hFindFile=0x3472a98 | out: hFindFile=0x3472a98) returned 1 [0118.339] GetProcessHeap () returned 0xae0000 [0118.339] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34620a0 | out: hHeap=0xae0000) returned 1 [0118.339] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll", cAlternateFileName="")) returned 1 [0118.340] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0118.340] GetProcessHeap () returned 0xae0000 [0118.340] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34620a0 [0118.340] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\*", lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3472c98 [0118.340] FindNextFileW (in: hFindFile=0x3472c98, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.340] FindNextFileW (in: hFindFile=0x3472c98, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0118.341] FindNextFileW (in: hFindFile=0x3472c98, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0118.341] FindClose (in: hFindFile=0x3472c98 | out: hFindFile=0x3472c98) returned 1 [0118.341] GetProcessHeap () returned 0xae0000 [0118.341] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34620a0 | out: hHeap=0xae0000) returned 1 [0118.341] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.exe", cAlternateFileName="")) returned 1 [0118.341] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-SK", cAlternateFileName="")) returned 1 [0118.342] GetProcessHeap () returned 0xae0000 [0118.342] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34620a0 [0118.342] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\*", lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3473058 [0118.342] FindNextFileW (in: hFindFile=0x3473058, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.342] FindNextFileW (in: hFindFile=0x3473058, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0118.343] FindNextFileW (in: hFindFile=0x3473058, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0118.343] FindClose (in: hFindFile=0x3473058 | out: hFindFile=0x3473058) returned 1 [0118.343] GetProcessHeap () returned 0xae0000 [0118.343] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34620a0 | out: hHeap=0xae0000) returned 1 [0118.343] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-SI", cAlternateFileName="")) returned 1 [0118.343] GetProcessHeap () returned 0xae0000 [0118.343] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34620a0 [0118.343] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\*", lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3472bd8 [0118.344] FindNextFileW (in: hFindFile=0x3472bd8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.344] FindNextFileW (in: hFindFile=0x3472bd8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0118.344] FindNextFileW (in: hFindFile=0x3472bd8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0118.344] FindClose (in: hFindFile=0x3472bd8 | out: hFindFile=0x3472bd8) returned 1 [0118.345] GetProcessHeap () returned 0xae0000 [0118.345] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34620a0 | out: hHeap=0xae0000) returned 1 [0118.345] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~1")) returned 1 [0118.345] GetProcessHeap () returned 0xae0000 [0118.345] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34620a0 [0118.345] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\*", lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0118.680] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.680] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0118.680] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0118.680] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0118.681] GetProcessHeap () returned 0xae0000 [0118.681] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34620a0 | out: hHeap=0xae0000) returned 1 [0118.681] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0118.681] GetProcessHeap () returned 0xae0000 [0118.681] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34620a0 [0118.681] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\*", lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0118.681] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.681] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0118.682] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0118.682] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0118.682] GetProcessHeap () returned 0xae0000 [0118.682] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34620a0 | out: hHeap=0xae0000) returned 1 [0118.682] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe467a929, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe467a929, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabIpsps.dll", cAlternateFileName="")) returned 1 [0118.682] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463d4edd, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x779da8e5, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463d4edd, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x3e9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tabskb.dll", cAlternateFileName="")) returned 1 [0118.683] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x5f780, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabTip.exe", cAlternateFileName="")) returned 1 [0118.683] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th-TH", cAlternateFileName="")) returned 1 [0118.683] GetProcessHeap () returned 0xae0000 [0118.683] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34620a0 [0118.683] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\*", lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0118.684] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.684] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0118.684] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0118.684] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0118.684] GetProcessHeap () returned 0xae0000 [0118.684] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34620a0 | out: hHeap=0xae0000) returned 1 [0118.684] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1aad768, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1aad768, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x109400, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipRes.dll", cAlternateFileName="")) returned 1 [0118.685] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll", cAlternateFileName="")) returned 1 [0118.685] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79680792, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x79680792, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x79680792, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x101200, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipskins.dll", cAlternateFileName="")) returned 1 [0118.685] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7965a52d, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x7965a52d, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x7965a52d, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x9e1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tiptsf.dll", cAlternateFileName="")) returned 1 [0118.686] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463d4edd, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x6ebfe576, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463d4edd, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x17a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tpcps.dll", cAlternateFileName="")) returned 1 [0118.686] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0118.686] GetProcessHeap () returned 0xae0000 [0118.686] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34620a0 [0118.686] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\*", lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0118.687] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.687] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0118.687] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0118.687] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0118.687] GetProcessHeap () returned 0xae0000 [0118.687] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34620a0 | out: hHeap=0xae0000) returned 1 [0118.688] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-UA", cAlternateFileName="")) returned 1 [0118.688] GetProcessHeap () returned 0xae0000 [0118.688] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34620a0 [0118.688] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\*", lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0118.688] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.688] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0118.688] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0118.689] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0118.689] GetProcessHeap () returned 0xae0000 [0118.689] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34620a0 | out: hHeap=0xae0000) returned 1 [0118.689] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0118.689] GetProcessHeap () returned 0xae0000 [0118.689] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34620a0 [0118.689] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\*", lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0118.689] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.690] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0118.690] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0118.690] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0118.690] GetProcessHeap () returned 0xae0000 [0118.690] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34620a0 | out: hHeap=0xae0000) returned 1 [0118.690] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0118.690] GetProcessHeap () returned 0xae0000 [0118.690] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34620a0 [0118.691] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\*", lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0118.691] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.691] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e0daa01, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e0daa01, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0118.691] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e0daa01, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e0daa01, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0118.691] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0118.691] GetProcessHeap () returned 0xae0000 [0118.692] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34620a0 | out: hHeap=0xae0000) returned 1 [0118.692] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0118.692] FindClose (in: hFindFile=0xaf91f8 | out: hFindFile=0xaf91f8) returned 1 [0118.692] GetProcessHeap () returned 0xae0000 [0118.692] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3430078 | out: hHeap=0xae0000) returned 1 [0118.694] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x26aee00 | out: lpFindFileData=0x26aee00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSInfo", cAlternateFileName="")) returned 1 [0118.695] GetProcessHeap () returned 0xae0000 [0118.695] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3430078 [0118.695] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\*", lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0119.162] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.162] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0119.162] GetProcessHeap () returned 0xae0000 [0119.162] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34620a0 [0119.164] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\*", lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91f8 [0119.165] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.165] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x73430dfb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x261f2e00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 1 [0119.166] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x73430dfb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x261f2e00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 0 [0119.166] FindClose (in: hFindFile=0xaf91f8 | out: hFindFile=0xaf91f8) returned 1 [0119.166] GetProcessHeap () returned 0xae0000 [0119.166] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34620a0 | out: hHeap=0xae0000) returned 1 [0119.166] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463aec8d, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x63793f1, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463aec8d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x5a600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 1 [0119.167] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463aec8d, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x63793f1, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463aec8d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x5a600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 0 [0119.167] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0119.167] GetProcessHeap () returned 0xae0000 [0119.167] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3430078 | out: hHeap=0xae0000) returned 1 [0119.169] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x26aee00 | out: lpFindFileData=0x26aee00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9f60362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE16", cAlternateFileName="")) returned 1 [0119.169] GetProcessHeap () returned 0xae0000 [0119.169] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3430078 [0119.169] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\*", lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9f60362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0119.171] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9f60362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.172] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9e7b530, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x58cd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICLUA.EXE", cAlternateFileName="")) returned 1 [0119.172] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Setup Controller", cAlternateFileName="OFFICE~1")) returned 1 [0119.172] GetProcessHeap () returned 0xae0000 [0119.172] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34620a0 [0119.173] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\*", lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91f8 [0119.177] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.177] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e1fe00, ftCreationTime.dwHighDateTime=0x1d0d79d, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x69e1fe00, ftLastWriteTime.dwHighDateTime=0x1d0d79d, nFileSizeHigh=0x0, nFileSizeLow=0x168258, dwReserved0=0x0, dwReserved1=0x0, cFileName="pidgenx.dll", cAlternateFileName="")) returned 1 [0119.178] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e1fe00, ftCreationTime.dwHighDateTime=0x1d0d79d, ftLastAccessTime.dwLowDateTime=0xda982389, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x69e1fe00, ftLastWriteTime.dwHighDateTime=0x1d0d79d, nFileSizeHigh=0x0, nFileSizeLow=0x902bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0119.178] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig.companion.dll", cAlternateFileName="PKEYCO~1.DLL")) returned 1 [0119.179] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig.companion.dll", cAlternateFileName="PKEYCO~1.DLL")) returned 0 [0119.179] FindClose (in: hFindFile=0xaf91f8 | out: hFindFile=0xaf91f8) returned 1 [0119.181] GetProcessHeap () returned 0xae0000 [0119.181] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34620a0 | out: hHeap=0xae0000) returned 1 [0119.181] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Setup Controller", cAlternateFileName="OFFICE~1")) returned 0 [0119.181] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0119.181] GetProcessHeap () returned 0xae0000 [0119.182] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3430078 | out: hHeap=0xae0000) returned 1 [0119.183] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x26aee00 | out: lpFindFileData=0x26aee00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1 [0119.183] GetProcessHeap () returned 0xae0000 [0119.183] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3430078 [0119.184] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0119.186] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.186] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0119.186] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0119.186] GetProcessHeap () returned 0xae0000 [0119.186] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3430078 | out: hHeap=0xae0000) returned 1 [0119.186] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x26aee00 | out: lpFindFileData=0x26aee00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Source Engine", cAlternateFileName="SOURCE~1")) returned 1 [0119.186] GetProcessHeap () returned 0xae0000 [0119.186] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3430078 [0119.186] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\*", lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0119.188] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.188] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3ba48, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSE.EXE", cAlternateFileName="")) returned 1 [0119.188] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3ba48, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSE.EXE", cAlternateFileName="")) returned 0 [0119.189] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0119.189] GetProcessHeap () returned 0xae0000 [0119.189] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3430078 | out: hHeap=0xae0000) returned 1 [0119.189] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x26aee00 | out: lpFindFileData=0x26aee00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0119.189] GetProcessHeap () returned 0xae0000 [0119.189] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3430078 [0119.189] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\*", lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91f8 [0119.193] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.193] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.htm", cAlternateFileName="")) returned 1 [0119.193] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.jpg", cAlternateFileName="")) returned 1 [0119.194] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a3ecc0a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d2da05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d2da05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0119.194] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.htm", cAlternateFileName="")) returned 1 [0119.195] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.jpg", cAlternateFileName="")) returned 1 [0119.195] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Green Bubbles.htm", cAlternateFileName="")) returned 1 [0119.195] ResetEvent (hEvent=0x2b8) returned 1 [0119.196] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0119.518] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1906, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenBubbles.jpg", cAlternateFileName="")) returned 1 [0119.520] ResetEvent (hEvent=0x2b8) returned 1 [0119.521] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0119.540] ResetEvent (hEvent=0x2b8) returned 1 [0119.541] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0119.582] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hand Prints.htm", cAlternateFileName="")) returned 1 [0119.584] ResetEvent (hEvent=0x2b8) returned 1 [0119.584] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0120.079] ResetEvent (hEvent=0x2b8) returned 1 [0120.079] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0120.128] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HandPrints.jpg", cAlternateFileName="")) returned 1 [0120.128] ResetEvent (hEvent=0x2b8) returned 1 [0120.128] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0120.152] ResetEvent (hEvent=0x2b8) returned 1 [0120.152] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0120.584] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Orange Circles.htm", cAlternateFileName="")) returned 1 [0120.584] ResetEvent (hEvent=0x2b8) returned 1 [0120.584] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0120.625] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x18ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrangeCircles.jpg", cAlternateFileName="")) returned 1 [0120.626] ResetEvent (hEvent=0x2b8) returned 1 [0120.626] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0120.662] ResetEvent (hEvent=0x2b8) returned 1 [0120.662] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0120.704] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.htm", cAlternateFileName="")) returned 1 [0120.704] ResetEvent (hEvent=0x2b8) returned 1 [0120.704] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0121.004] ResetEvent (hEvent=0x2b8) returned 1 [0121.004] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0121.218] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.jpg", cAlternateFileName="")) returned 1 [0121.219] ResetEvent (hEvent=0x2b8) returned 1 [0121.219] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0121.631] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96dccc65, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.htm", cAlternateFileName="")) returned 1 [0121.631] ResetEvent (hEvent=0x2b8) returned 1 [0121.631] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0121.930] ResetEvent (hEvent=0x2b8) returned 1 [0121.930] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0121.972] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96dccc65, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96dccc65, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96dccc65, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.jpg", cAlternateFileName="")) returned 1 [0121.973] ResetEvent (hEvent=0x2b8) returned 1 [0121.973] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0122.316] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shades of Blue.htm", cAlternateFileName="")) returned 1 [0122.316] ResetEvent (hEvent=0x2b8) returned 1 [0122.317] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0122.362] ResetEvent (hEvent=0x2b8) returned 1 [0122.362] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0122.941] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShadesOfBlue.jpg", cAlternateFileName="")) returned 1 [0122.941] ResetEvent (hEvent=0x2b8) returned 1 [0122.942] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0122.953] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Soft Blue.htm", cAlternateFileName="")) returned 1 [0122.953] ResetEvent (hEvent=0x2b8) returned 1 [0122.953] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0123.020] ResetEvent (hEvent=0x2b8) returned 1 [0123.020] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0123.061] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2949, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.jpg", cAlternateFileName="")) returned 1 [0123.063] ResetEvent (hEvent=0x2b8) returned 1 [0123.063] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0123.441] ResetEvent (hEvent=0x2b8) returned 1 [0123.441] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0123.545] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.htm", cAlternateFileName="")) returned 1 [0123.546] ResetEvent (hEvent=0x2b8) returned 1 [0123.546] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0123.867] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 1 [0123.869] ResetEvent (hEvent=0x2b8) returned 1 [0123.869] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0123.916] ResetEvent (hEvent=0x2b8) returned 1 [0123.917] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0124.245] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 0 [0124.245] FindClose (in: hFindFile=0xaf91f8 | out: hFindFile=0xaf91f8) returned 1 [0124.247] GetProcessHeap () returned 0xae0000 [0124.247] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3430078 | out: hHeap=0xae0000) returned 1 [0124.247] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x26aee00 | out: lpFindFileData=0x26aee00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TextConv", cAlternateFileName="")) returned 1 [0124.248] GetProcessHeap () returned 0xae0000 [0124.248] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3430078 [0124.248] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\*", lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91f8 [0124.248] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.248] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0124.249] GetProcessHeap () returned 0xae0000 [0124.249] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0124.249] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\en-US\\*", lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487588 [0124.250] FindNextFileW (in: hFindFile=0x3487588, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.250] FindNextFileW (in: hFindFile=0x3487588, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0124.250] FindClose (in: hFindFile=0x3487588 | out: hFindFile=0x3487588) returned 1 [0124.250] GetProcessHeap () returned 0xae0000 [0124.250] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0124.251] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0124.251] FindClose (in: hFindFile=0xaf91f8 | out: hFindFile=0xaf91f8) returned 1 [0124.251] GetProcessHeap () returned 0xae0000 [0124.251] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3430078 | out: hHeap=0xae0000) returned 1 [0124.253] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x26aee00 | out: lpFindFileData=0x26aee00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Triedit", cAlternateFileName="")) returned 1 [0124.253] GetProcessHeap () returned 0xae0000 [0124.253] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3430078 [0124.254] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\*", lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91f8 [0124.254] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.255] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0124.255] GetProcessHeap () returned 0xae0000 [0124.255] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0124.256] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\en-US\\*", lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487dc8 [0124.256] FindNextFileW (in: hFindFile=0x3487dc8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.257] FindNextFileW (in: hFindFile=0x3487dc8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0124.257] FindClose (in: hFindFile=0x3487dc8 | out: hFindFile=0x3487dc8) returned 1 [0124.257] GetProcessHeap () returned 0xae0000 [0124.257] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0124.257] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0124.258] FindClose (in: hFindFile=0xaf91f8 | out: hFindFile=0xaf91f8) returned 1 [0124.258] GetProcessHeap () returned 0xae0000 [0124.258] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3430078 | out: hHeap=0xae0000) returned 1 [0124.260] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x26aee00 | out: lpFindFileData=0x26aee00*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC", cAlternateFileName="")) returned 1 [0124.260] GetProcessHeap () returned 0xae0000 [0124.260] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3430078 [0124.261] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\*", lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91f8 [0124.261] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.261] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8127e00, ftCreationTime.dwHighDateTime=0x1cbd076, ftLastAccessTime.dwLowDateTime=0xcd0a4098, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd8127e00, ftLastWriteTime.dwHighDateTime=0x1cbd076, nFileSizeHigh=0x0, nFileSizeLow=0xf1b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia100.dll", cAlternateFileName="")) returned 1 [0124.261] ResetEvent (hEvent=0x2b8) returned 1 [0124.262] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0124.293] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfe87c00, ftCreationTime.dwHighDateTime=0x1cbfe36, ftLastAccessTime.dwLowDateTime=0x2ce22546, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xcfe87c00, ftLastWriteTime.dwHighDateTime=0x1cbfe36, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 1 [0124.294] ResetEvent (hEvent=0x2b8) returned 1 [0124.294] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0124.594] ResetEvent (hEvent=0x2b8) returned 1 [0124.595] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0124.869] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfe87c00, ftCreationTime.dwHighDateTime=0x1cbfe36, ftLastAccessTime.dwLowDateTime=0x2ce22546, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xcfe87c00, ftLastWriteTime.dwHighDateTime=0x1cbfe36, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 0 [0124.870] FindClose (in: hFindFile=0xaf91f8 | out: hFindFile=0xaf91f8) returned 1 [0124.870] GetProcessHeap () returned 0xae0000 [0124.870] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3430078 | out: hHeap=0xae0000) returned 1 [0124.872] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x26aee00 | out: lpFindFileData=0x26aee00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX", cAlternateFileName="")) returned 1 [0124.872] GetProcessHeap () returned 0xae0000 [0124.872] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3430078 [0124.872] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VGX\\*", lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0124.872] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.873] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a69a2a7, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xb3fd6e56, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x4a69a2a7, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xf1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 1 [0124.873] ResetEvent (hEvent=0x2b8) returned 1 [0124.873] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0124.912] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a69a2a7, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xb3fd6e56, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x4a69a2a7, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xf1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 0 [0124.912] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0124.913] GetProcessHeap () returned 0xae0000 [0124.913] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3430078 | out: hHeap=0xae0000) returned 1 [0124.914] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x26aee00 | out: lpFindFileData=0x26aee00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTO", cAlternateFileName="")) returned 1 [0124.914] GetProcessHeap () returned 0xae0000 [0124.914] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3430078 [0124.914] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\*", lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0124.914] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.914] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0124.914] GetProcessHeap () returned 0xae0000 [0124.915] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3440080 [0124.915] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\*", lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91f8 [0124.915] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.916] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0124.916] GetProcessHeap () returned 0xae0000 [0124.916] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0124.916] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\*", lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487b08 [0124.916] FindNextFileW (in: hFindFile=0x3487b08, lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.917] FindNextFileW (in: hFindFile=0x3487b08, lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6d7a0a, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x30a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstallerUI.dll", cAlternateFileName="VSTOIN~1.DLL")) returned 1 [0124.917] ResetEvent (hEvent=0x2b8) returned 1 [0124.917] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0125.357] ResetEvent (hEvent=0x2b8) returned 1 [0125.358] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0125.675] FindNextFileW (in: hFindFile=0x3487b08, lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x5080, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1 [0125.675] ResetEvent (hEvent=0x2b8) returned 1 [0125.676] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0125.877] ResetEvent (hEvent=0x2b8) returned 1 [0125.877] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0125.939] FindNextFileW (in: hFindFile=0x3487b08, lpFindFileData=0x26ae650 | out: lpFindFileData=0x26ae650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x5080, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 0 [0125.939] FindClose (in: hFindFile=0x3487b08 | out: hFindFile=0x3487b08) returned 1 [0125.941] GetProcessHeap () returned 0xae0000 [0125.941] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0125.941] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x18888, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstaller.exe", cAlternateFileName="VSTOIN~1.EXE")) returned 1 [0125.941] ResetEvent (hEvent=0x2b8) returned 1 [0125.941] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0126.640] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x59a70, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoader.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1 [0126.641] ResetEvent (hEvent=0x2b8) returned 1 [0126.641] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0126.742] ResetEvent (hEvent=0x2b8) returned 1 [0126.742] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0128.046] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xbee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 1 [0128.047] ResetEvent (hEvent=0x2b8) returned 1 [0128.047] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0130.134] ResetEvent (hEvent=0x2b8) returned 1 [0130.134] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0130.638] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xbee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 0 [0130.639] FindClose (in: hFindFile=0xaf91f8 | out: hFindFile=0xaf91f8) returned 1 [0130.639] GetProcessHeap () returned 0xae0000 [0130.639] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3440080 | out: hHeap=0xae0000) returned 1 [0130.639] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x29080, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee.dll", cAlternateFileName="")) returned 1 [0130.640] ResetEvent (hEvent=0x2b8) returned 1 [0130.640] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0130.701] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x4298, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee100.tlb", cAlternateFileName="VSTOEE~1.TLB")) returned 1 [0130.702] ResetEvent (hEvent=0x2b8) returned 1 [0130.702] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0131.697] ResetEvent (hEvent=0x2b8) returned 1 [0131.697] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0131.818] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x5898, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 1 [0131.819] ResetEvent (hEvent=0x2b8) returned 1 [0131.819] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0132.162] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x5898, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 0 [0132.162] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0132.162] GetProcessHeap () returned 0xae0000 [0132.163] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3430078 | out: hHeap=0xae0000) returned 1 [0132.163] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x26aee00 | out: lpFindFileData=0x26aee00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTO", cAlternateFileName="")) returned 0 [0132.163] FindClose (in: hFindFile=0xaf9838 | out: hFindFile=0xaf9838) returned 1 [0132.163] GetProcessHeap () returned 0xae0000 [0132.163] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3420070 | out: hHeap=0xae0000) returned 1 [0132.165] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0132.165] GetProcessHeap () returned 0xae0000 [0132.165] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3420070 [0132.167] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Services\\*", lpFindFileData=0x26aee00 | out: lpFindFileData=0x26aee00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487e88 [0132.167] FindNextFileW (in: hFindFile=0x3487e88, lpFindFileData=0x26aee00 | out: lpFindFileData=0x26aee00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.167] FindNextFileW (in: hFindFile=0x3487e88, lpFindFileData=0x26aee00 | out: lpFindFileData=0x26aee00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 1 [0132.169] ResetEvent (hEvent=0x2b8) returned 1 [0132.169] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0132.984] FindNextFileW (in: hFindFile=0x3487e88, lpFindFileData=0x26aee00 | out: lpFindFileData=0x26aee00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 0 [0132.984] FindClose (in: hFindFile=0x3487e88 | out: hFindFile=0x3487e88) returned 1 [0132.985] GetProcessHeap () returned 0xae0000 [0132.985] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3420070 | out: hHeap=0xae0000) returned 1 [0132.985] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x26af090 | out: lpFindFileData=0x26af090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1 [0132.985] GetProcessHeap () returned 0xae0000 [0132.985] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3420070 [0132.985] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\*", lpFindFileData=0x26aee00 | out: lpFindFileData=0x26aee00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487948 [0132.986] FindNextFileW (in: hFindFile=0x3487948, lpFindFileData=0x26aee00 | out: lpFindFileData=0x26aee00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.986] FindNextFileW (in: hFindFile=0x3487948, lpFindFileData=0x26aee00 | out: lpFindFileData=0x26aee00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ado", cAlternateFileName="")) returned 1 [0132.986] GetProcessHeap () returned 0xae0000 [0132.986] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34890e8 [0132.986] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\*", lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487f08 [0132.987] FindNextFileW (in: hFindFile=0x3487f08, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.987] FindNextFileW (in: hFindFile=0x3487f08, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52a0c6a1, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x52a0c6a1, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x52a0c6a1, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3a08, dwReserved0=0x0, dwReserved1=0x0, cFileName="adojavas.inc", cAlternateFileName="")) returned 1 [0132.987] ResetEvent (hEvent=0x2b8) returned 1 [0132.987] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0133.392] FindNextFileW (in: hFindFile=0x3487f08, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529e643a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x529e643a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x529e643a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3b5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="adovbs.inc", cAlternateFileName="")) returned 1 [0133.392] ResetEvent (hEvent=0x2b8) returned 1 [0133.392] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0135.356] ResetEvent (hEvent=0x2b8) returned 1 [0135.356] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0135.383] FindNextFileW (in: hFindFile=0x3487f08, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0135.383] GetProcessHeap () returned 0xae0000 [0135.383] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3460090 [0135.384] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\en-US\\*", lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3488048 [0135.385] FindNextFileW (in: hFindFile=0x3488048, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.385] FindNextFileW (in: hFindFile=0x3488048, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9483e2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 1 [0135.385] ResetEvent (hEvent=0x2b8) returned 1 [0135.385] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0135.421] FindNextFileW (in: hFindFile=0x3488048, lpFindFileData=0x26ae8e0 | out: lpFindFileData=0x26ae8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9483e2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 0 [0135.422] FindClose (in: hFindFile=0x3488048 | out: hFindFile=0x3488048) returned 1 [0135.426] GetProcessHeap () returned 0xae0000 [0135.426] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3460090 | out: hHeap=0xae0000) returned 1 [0135.426] FindNextFileW (in: hFindFile=0x3487f08, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll", cAlternateFileName="")) returned 1 [0135.427] ResetEvent (hEvent=0x2b8) returned 1 [0135.427] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0136.014] FindNextFileW (in: hFindFile=0x3487f08, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463fb128, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xced4b5c5, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x463fb128, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x12d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado15.dll", cAlternateFileName="")) returned 1 [0136.014] ResetEvent (hEvent=0x2b8) returned 1 [0136.014] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0136.410] ResetEvent (hEvent=0x2b8) returned 1 [0136.410] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0136.823] FindNextFileW (in: hFindFile=0x3487f08, lpFindFileData=0x26aeb70 | out: lpFindFileData=0x26aeb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado20.tlb", cAlternateFileName="")) returned 1 [0136.823] ResetEvent (hEvent=0x2b8) returned 1 [0136.823] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) Thread: id = 22 os_tid = 0x658 [0112.855] GetProcessHeap () returned 0xae0000 [0112.855] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x38) returned 0xaf97b8 [0112.855] GetProcessHeap () returned 0xae0000 [0112.855] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x18) returned 0xaf86c0 [0112.855] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2d4 [0112.855] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2d8 [0112.855] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2dc [0112.856] GetProcessHeap () returned 0xae0000 [0112.856] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0xb530b8 [0112.857] GetProcessHeap () returned 0xae0000 [0112.857] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x50) returned 0xb09b80 [0112.857] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75e90000 [0112.857] GetProcAddress (hModule=0x75e90000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75ea6b30 [0112.857] Wow64DisableWow64FsRedirection (in: OldValue=0x2b6fbe4 | out: OldValue=0x2b6fbe4*=0x0) returned 1 [0112.857] GetProcessHeap () returned 0xae0000 [0112.857] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb09b80 | out: hHeap=0xae0000) returned 1 [0112.857] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1, lpStartAddress=0x9148ba, lpParameter=0x2b6fbe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2e0 [0112.859] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1, lpStartAddress=0x9148ba, lpParameter=0x2b6fbe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2e4 [0112.860] GetProcessHeap () returned 0xae0000 [0112.860] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0xb630c0 [0112.861] FindFirstFileW (in: lpFileName="\\\\?\\C:\\*", lpFindFileData=0x2b6f958 | out: lpFindFileData=0x2b6f958*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1b09b8d, dwReserved1=0x745f9fc4, cFileName="$GetCurrent", cAlternateFileName="$GETCU~1")) returned 0xaf95f8 [0112.862] GetProcessHeap () returned 0xae0000 [0112.862] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0xb730c8 [0112.863] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$GetCurrent\\*", lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0xaf9538 [0112.863] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0112.864] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Logs", cAlternateFileName="")) returned 1 [0112.864] GetProcessHeap () returned 0xae0000 [0112.864] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0xb840d8 [0112.865] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0112.867] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0112.868] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x542c8aac, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0xafe5f7a, ftLastWriteTime.dwHighDateTime=0x1d3273e, nFileSizeHigh=0x0, nFileSizeLow=0xa6b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="downlevel_2017_09_07_02_02_39_766.log", cAlternateFileName="DOWNLE~1.LOG")) returned 1 [0112.868] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973abb0f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1774, dwReserved0=0x0, dwReserved1=0x0, cFileName="oobe_2017_09_07_03_08_57_737.log", cAlternateFileName="OOBE_2~1.LOG")) returned 1 [0112.868] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 1 [0112.868] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 0 [0112.868] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0112.872] GetProcessHeap () returned 0xae0000 [0112.872] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb840d8 | out: hHeap=0xae0000) returned 1 [0112.873] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SafeOS", cAlternateFileName="")) returned 1 [0112.873] GetProcessHeap () returned 0xae0000 [0112.873] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0xb840d8 [0112.874] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9838 [0112.876] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0112.876] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9568f13f, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9568f13f, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x232c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentOOBE.dll", cAlternateFileName="GETCUR~1.DLL")) returned 1 [0112.876] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956819aa, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x956819aa, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentRollback.ini", cAlternateFileName="GETCUR~1.INI")) returned 1 [0112.877] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x54acc791, ftLastWriteTime.dwHighDateTime=0x1d3273a, nFileSizeHigh=0x0, nFileSizeLow=0x241, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupComplete.cmd", cAlternateFileName="PARTNE~1.CMD")) returned 1 [0112.877] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9575af11, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9577d1ec, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="preoobe.cmd", cAlternateFileName="")) returned 1 [0112.877] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 1 [0112.877] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 0 [0112.877] FindClose (in: hFindFile=0xaf9838 | out: hFindFile=0xaf9838) returned 1 [0112.879] GetProcessHeap () returned 0xae0000 [0112.879] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb840d8 | out: hHeap=0xae0000) returned 1 [0112.880] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SafeOS", cAlternateFileName="")) returned 0 [0112.880] FindClose (in: hFindFile=0xaf9538 | out: hFindFile=0xaf9538) returned 1 [0112.881] GetProcessHeap () returned 0xae0000 [0112.881] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb730c8 | out: hHeap=0xae0000) returned 1 [0112.882] FindNextFileW (in: hFindFile=0xaf95f8, lpFindFileData=0x2b6f958 | out: lpFindFileData=0x2b6f958*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1b09b8d, dwReserved1=0x745f9fc4, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 1 [0112.884] GetProcessHeap () returned 0xae0000 [0112.884] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0xb740d0 [0112.884] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\*", lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0xaf9138 [0112.884] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0112.885] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="S-1-5-18", cAlternateFileName="")) returned 1 [0112.885] GetProcessHeap () returned 0xae0000 [0112.885] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0xb850e0 [0112.886] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-18\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9538 [0112.886] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0112.886] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0112.886] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0112.887] FindClose (in: hFindFile=0xaf9538 | out: hFindFile=0xaf9538) returned 1 [0112.887] GetProcessHeap () returned 0xae0000 [0112.887] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb850e0 | out: hHeap=0xae0000) returned 1 [0112.887] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0112.888] GetProcessHeap () returned 0xae0000 [0112.888] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0xb850e0 [0112.889] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9538 [0112.889] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0112.889] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0112.890] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0112.890] FindClose (in: hFindFile=0xaf9538 | out: hFindFile=0xaf9538) returned 1 [0112.890] GetProcessHeap () returned 0xae0000 [0112.890] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb850e0 | out: hHeap=0xae0000) returned 1 [0112.891] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 0 [0112.891] FindClose (in: hFindFile=0xaf9138 | out: hFindFile=0xaf9138) returned 1 [0112.891] GetProcessHeap () returned 0xae0000 [0112.892] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb740d0 | out: hHeap=0xae0000) returned 1 [0112.893] FindNextFileW (in: hFindFile=0xaf95f8, lpFindFileData=0x2b6f958 | out: lpFindFileData=0x2b6f958*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1b09b8d, dwReserved1=0x745f9fc4, cFileName="$WINRE_BACKUP_PARTITION.MARKER", cAlternateFileName="$WINRE~1.MAR")) returned 1 [0112.893] FindNextFileW (in: hFindFile=0xaf95f8, lpFindFileData=0x2b6f958 | out: lpFindFileData=0x2b6f958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1b09b8d, dwReserved1=0x745f9fc4, cFileName="588bce7c90097ed212", cAlternateFileName="588BCE~1")) returned 1 [0112.893] GetProcessHeap () returned 0xae0000 [0112.893] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0xb740d0 [0112.895] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\*", lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0xaf9638 [0113.200] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0113.241] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1025", cAlternateFileName="")) returned 1 [0113.242] GetProcessHeap () returned 0xae0000 [0113.242] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3402070 [0113.243] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf97f8 [0113.243] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.244] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.244] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x121e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.244] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.244] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.244] FindClose (in: hFindFile=0xaf97f8 | out: hFindFile=0xaf97f8) returned 1 [0113.245] GetProcessHeap () returned 0xae0000 [0113.245] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3402070 | out: hHeap=0xae0000) returned 1 [0113.245] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1028", cAlternateFileName="")) returned 1 [0113.245] GetProcessHeap () returned 0xae0000 [0113.245] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3402070 [0113.245] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf97f8 [0113.245] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.245] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.246] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.246] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.246] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.246] FindClose (in: hFindFile=0xaf97f8 | out: hFindFile=0xaf97f8) returned 1 [0113.246] GetProcessHeap () returned 0xae0000 [0113.246] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3402070 | out: hHeap=0xae0000) returned 1 [0113.246] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1029", cAlternateFileName="")) returned 1 [0113.246] GetProcessHeap () returned 0xae0000 [0113.247] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3402070 [0113.247] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0113.247] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.247] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.247] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13c4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.247] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.248] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.248] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0113.248] GetProcessHeap () returned 0xae0000 [0113.248] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3402070 | out: hHeap=0xae0000) returned 1 [0113.248] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1030", cAlternateFileName="")) returned 1 [0113.248] GetProcessHeap () returned 0xae0000 [0113.248] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3402070 [0113.248] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf97f8 [0113.248] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.249] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xcf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.249] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12fb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.249] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.249] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.249] FindClose (in: hFindFile=0xaf97f8 | out: hFindFile=0xaf97f8) returned 1 [0113.249] GetProcessHeap () returned 0xae0000 [0113.249] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3402070 | out: hHeap=0xae0000) returned 1 [0113.249] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1031", cAlternateFileName="")) returned 1 [0113.250] GetProcessHeap () returned 0xae0000 [0113.250] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3402070 [0113.250] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9178 [0113.250] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.250] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.250] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.250] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.251] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.251] FindClose (in: hFindFile=0xaf9178 | out: hFindFile=0xaf9178) returned 1 [0113.251] GetProcessHeap () returned 0xae0000 [0113.251] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3402070 | out: hHeap=0xae0000) returned 1 [0113.251] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1032", cAlternateFileName="")) returned 1 [0113.251] GetProcessHeap () returned 0xae0000 [0113.251] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3402070 [0113.251] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0113.251] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.252] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x22ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.252] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1510c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.252] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.252] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.252] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0113.252] GetProcessHeap () returned 0xae0000 [0113.252] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3402070 | out: hHeap=0xae0000) returned 1 [0113.253] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1033", cAlternateFileName="")) returned 1 [0113.253] GetProcessHeap () returned 0xae0000 [0113.253] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3402070 [0113.253] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9838 [0113.253] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.253] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd723cc00, ftCreationTime.dwHighDateTime=0x1cabb47, ftLastAccessTime.dwLowDateTime=0xd723cc00, ftLastAccessTime.dwHighDateTime=0x1cabb47, ftLastWriteTime.dwLowDateTime=0xd723cc00, ftLastWriteTime.dwHighDateTime=0x1cabb47, nFileSizeHigh=0x0, nFileSizeLow=0xc74, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.253] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x47ad1a00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x47ad1a00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x47ad1a00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12db0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.254] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.254] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.254] FindClose (in: hFindFile=0xaf9838 | out: hFindFile=0xaf9838) returned 1 [0113.254] GetProcessHeap () returned 0xae0000 [0113.254] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3402070 | out: hHeap=0xae0000) returned 1 [0113.254] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1035", cAlternateFileName="")) returned 1 [0113.254] GetProcessHeap () returned 0xae0000 [0113.254] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3402070 [0113.254] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf97f8 [0113.255] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.255] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe76, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.255] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12cde, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.255] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.255] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.255] FindClose (in: hFindFile=0xaf97f8 | out: hFindFile=0xaf97f8) returned 1 [0113.256] GetProcessHeap () returned 0xae0000 [0113.256] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3402070 | out: hHeap=0xae0000) returned 1 [0113.256] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1036", cAlternateFileName="")) returned 1 [0113.256] GetProcessHeap () returned 0xae0000 [0113.256] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3402070 [0113.256] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0113.256] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.256] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.257] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x14412, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.257] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.257] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.257] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0113.257] GetProcessHeap () returned 0xae0000 [0113.257] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3402070 | out: hHeap=0xae0000) returned 1 [0113.257] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1037", cAlternateFileName="")) returned 1 [0113.257] GetProcessHeap () returned 0xae0000 [0113.258] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3402070 [0113.258] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0113.258] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.258] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.258] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1198c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.258] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.258] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.259] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0113.259] GetProcessHeap () returned 0xae0000 [0113.259] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3402070 | out: hHeap=0xae0000) returned 1 [0113.259] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1038", cAlternateFileName="")) returned 1 [0113.259] GetProcessHeap () returned 0xae0000 [0113.259] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3402070 [0113.259] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9138 [0113.259] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.260] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x109e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.260] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x151aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.262] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.262] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.262] FindClose (in: hFindFile=0xaf9138 | out: hFindFile=0xaf9138) returned 1 [0113.262] GetProcessHeap () returned 0xae0000 [0113.262] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3402070 | out: hHeap=0xae0000) returned 1 [0113.262] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1040", cAlternateFileName="")) returned 1 [0113.262] GetProcessHeap () returned 0xae0000 [0113.262] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3402070 [0113.262] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0113.263] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.263] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.263] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x138bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.263] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.263] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.264] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0113.264] GetProcessHeap () returned 0xae0000 [0113.264] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3402070 | out: hHeap=0xae0000) returned 1 [0113.264] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1041", cAlternateFileName="")) returned 1 [0113.264] GetProcessHeap () returned 0xae0000 [0113.264] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3402070 [0113.264] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0113.496] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.496] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x278d, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.496] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x10a82, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.496] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.497] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.497] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0113.497] GetProcessHeap () returned 0xae0000 [0113.497] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3402070 | out: hHeap=0xae0000) returned 1 [0113.497] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1042", cAlternateFileName="")) returned 1 [0113.497] GetProcessHeap () returned 0xae0000 [0113.497] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3402070 [0113.497] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0113.498] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.498] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x318f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.498] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xfed6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.498] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.498] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.499] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0113.499] GetProcessHeap () returned 0xae0000 [0113.499] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3402070 | out: hHeap=0xae0000) returned 1 [0113.499] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1043", cAlternateFileName="")) returned 1 [0113.499] GetProcessHeap () returned 0xae0000 [0113.499] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3402070 [0113.499] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf97f8 [0113.500] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.500] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdda, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.500] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13712, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.500] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.500] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.500] FindClose (in: hFindFile=0xaf97f8 | out: hFindFile=0xaf97f8) returned 1 [0113.500] GetProcessHeap () returned 0xae0000 [0113.501] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3402070 | out: hHeap=0xae0000) returned 1 [0113.501] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1044", cAlternateFileName="")) returned 1 [0113.501] GetProcessHeap () returned 0xae0000 [0113.501] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3402070 [0113.501] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf97f8 [0113.503] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.503] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.503] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x135c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.503] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.504] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.504] FindClose (in: hFindFile=0xaf97f8 | out: hFindFile=0xaf97f8) returned 1 [0113.504] GetProcessHeap () returned 0xae0000 [0113.504] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3402070 | out: hHeap=0xae0000) returned 1 [0113.507] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1045", cAlternateFileName="")) returned 1 [0113.508] GetProcessHeap () returned 0xae0000 [0113.508] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3402070 [0113.508] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf97f8 [0113.512] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.512] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.512] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.512] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.513] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.513] FindClose (in: hFindFile=0xaf97f8 | out: hFindFile=0xaf97f8) returned 1 [0113.513] GetProcessHeap () returned 0xae0000 [0113.513] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3402070 | out: hHeap=0xae0000) returned 1 [0113.513] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1046", cAlternateFileName="")) returned 1 [0113.513] GetProcessHeap () returned 0xae0000 [0113.513] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3402070 [0113.514] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf97f8 [0113.515] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.515] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe63, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.515] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.516] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.516] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.516] FindClose (in: hFindFile=0xaf97f8 | out: hFindFile=0xaf97f8) returned 1 [0113.516] GetProcessHeap () returned 0xae0000 [0113.516] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3402070 | out: hHeap=0xae0000) returned 1 [0113.516] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1049", cAlternateFileName="")) returned 1 [0113.517] GetProcessHeap () returned 0xae0000 [0113.517] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3402070 [0113.517] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf97f8 [0113.517] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.517] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.517] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13e4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.518] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.518] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.518] FindClose (in: hFindFile=0xaf97f8 | out: hFindFile=0xaf97f8) returned 1 [0113.518] GetProcessHeap () returned 0xae0000 [0113.518] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3402070 | out: hHeap=0xae0000) returned 1 [0113.518] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1053", cAlternateFileName="")) returned 1 [0113.518] GetProcessHeap () returned 0xae0000 [0113.519] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3402070 [0113.519] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9138 [0113.520] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.521] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf19, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.521] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.521] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.521] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.521] FindClose (in: hFindFile=0xaf9138 | out: hFindFile=0xaf9138) returned 1 [0113.521] GetProcessHeap () returned 0xae0000 [0113.521] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3402070 | out: hHeap=0xae0000) returned 1 [0113.522] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1055", cAlternateFileName="")) returned 1 [0113.522] GetProcessHeap () returned 0xae0000 [0113.522] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3402070 [0113.522] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf97f8 [0113.523] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.524] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf13, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.524] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12c12, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.524] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.524] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.524] FindClose (in: hFindFile=0xaf97f8 | out: hFindFile=0xaf97f8) returned 1 [0113.525] GetProcessHeap () returned 0xae0000 [0113.525] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3402070 | out: hHeap=0xae0000) returned 1 [0113.525] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="2052", cAlternateFileName="")) returned 1 [0113.525] GetProcessHeap () returned 0xae0000 [0113.525] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3402070 [0113.525] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9178 [0113.530] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.530] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x16c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.530] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.531] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.531] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.531] FindClose (in: hFindFile=0xaf9178 | out: hFindFile=0xaf9178) returned 1 [0113.531] GetProcessHeap () returned 0xae0000 [0113.531] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3402070 | out: hHeap=0xae0000) returned 1 [0113.531] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="2070", cAlternateFileName="")) returned 1 [0113.531] GetProcessHeap () returned 0xae0000 [0113.532] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3402070 [0113.532] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf97f8 [0113.532] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.532] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.532] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1397e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.533] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.533] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.533] FindClose (in: hFindFile=0xaf97f8 | out: hFindFile=0xaf97f8) returned 1 [0113.533] GetProcessHeap () returned 0xae0000 [0113.533] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3402070 | out: hHeap=0xae0000) returned 1 [0113.533] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="3076", cAlternateFileName="")) returned 1 [0113.533] GetProcessHeap () returned 0xae0000 [0113.534] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3402070 [0113.534] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf97f8 [0113.534] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.534] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.534] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.535] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.535] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.535] FindClose (in: hFindFile=0xaf97f8 | out: hFindFile=0xaf97f8) returned 1 [0113.535] GetProcessHeap () returned 0xae0000 [0113.535] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3402070 | out: hHeap=0xae0000) returned 1 [0113.535] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="3082", cAlternateFileName="")) returned 1 [0113.535] GetProcessHeap () returned 0xae0000 [0113.535] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3402070 [0113.536] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9138 [0113.537] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.537] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.538] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1387c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.538] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.538] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.538] FindClose (in: hFindFile=0xaf9138 | out: hFindFile=0xaf9138) returned 1 [0113.538] GetProcessHeap () returned 0xae0000 [0113.538] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3402070 | out: hHeap=0xae0000) returned 1 [0113.538] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Client", cAlternateFileName="")) returned 1 [0113.539] GetProcessHeap () returned 0xae0000 [0113.539] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3402070 [0113.539] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf97f8 [0113.540] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.540] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce2bc00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0xce2bc00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0xce2bc00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x31444, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0113.541] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0113.541] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0 [0113.541] FindClose (in: hFindFile=0xaf97f8 | out: hFindFile=0xaf97f8) returned 1 [0113.855] GetProcessHeap () returned 0xae0000 [0113.855] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3402070 | out: hHeap=0xae0000) returned 1 [0113.855] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbc518d00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbc518d00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbc518d00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3ef6, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="DHtmlHeader.html", cAlternateFileName="DHTMLH~1.HTM")) returned 1 [0113.855] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x159d5, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="DisplayIcon.ico", cAlternateFileName="DISPLA~1.ICO")) returned 1 [0113.855] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Extended", cAlternateFileName="")) returned 1 [0113.855] GetProcessHeap () returned 0xae0000 [0113.855] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3402070 [0113.856] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf97f8 [0113.860] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.860] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2a714f00, ftCreationTime.dwHighDateTime=0x1cac6f0, ftLastAccessTime.dwLowDateTime=0x2a714f00, ftLastAccessTime.dwHighDateTime=0x1cac6f0, ftLastWriteTime.dwLowDateTime=0x2a714f00, ftLastWriteTime.dwHighDateTime=0x1cac6f0, nFileSizeHigh=0x0, nFileSizeLow=0x16c82, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0113.860] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0113.860] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0 [0113.860] FindClose (in: hFindFile=0xaf97f8 | out: hFindFile=0xaf97f8) returned 1 [0113.860] GetProcessHeap () returned 0xae0000 [0113.860] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3402070 | out: hHeap=0xae0000) returned 1 [0113.860] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Graphics", cAlternateFileName="")) returned 1 [0113.861] GetProcessHeap () returned 0xae0000 [0113.861] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3402070 [0113.861] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0113.866] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.866] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Print.ico", cAlternateFileName="")) returned 1 [0113.866] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate1.ico", cAlternateFileName="")) returned 1 [0113.866] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate2.ico", cAlternateFileName="")) returned 1 [0113.867] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate3.ico", cAlternateFileName="")) returned 1 [0113.867] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate4.ico", cAlternateFileName="")) returned 1 [0113.867] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate5.ico", cAlternateFileName="")) returned 1 [0113.867] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate6.ico", cAlternateFileName="")) returned 1 [0113.867] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate7.ico", cAlternateFileName="")) returned 1 [0113.868] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate8.ico", cAlternateFileName="")) returned 1 [0113.868] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Save.ico", cAlternateFileName="")) returned 1 [0113.868] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x8f66, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.ico", cAlternateFileName="")) returned 1 [0113.868] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b5e7f00, ftCreationTime.dwHighDateTime=0x1ca927c, ftLastAccessTime.dwLowDateTime=0x5b5e7f00, ftLastAccessTime.dwHighDateTime=0x1ca927c, ftLastWriteTime.dwLowDateTime=0x5b5e7f00, ftLastWriteTime.dwHighDateTime=0x1ca927c, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="stop.ico", cAlternateFileName="")) returned 1 [0113.868] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqMet.ico", cAlternateFileName="SYSREQ~1.ICO")) returned 1 [0113.868] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqNotMet.ico", cAlternateFileName="SYSREQ~2.ICO")) returned 1 [0113.869] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 1 [0113.869] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 0 [0113.869] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0113.874] GetProcessHeap () returned 0xae0000 [0113.874] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3402070 | out: hHeap=0xae0000) returned 1 [0113.874] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0xe2c, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="header.bmp", cAlternateFileName="")) returned 1 [0113.874] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x66ea7e00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0xad1384b, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Core.mzz", cAlternateFileName="NETFX_~1.MZZ")) returned 1 [0113.874] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xc183da00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0x1d0200, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Core_x64.msi", cAlternateFileName="NETFX_~1.MSI")) returned 1 [0113.874] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4c130c00, ftCreationTime.dwHighDateTime=0x1cac6d9, ftLastAccessTime.dwLowDateTime=0x4c130c00, ftLastAccessTime.dwHighDateTime=0x1cac6d9, ftLastWriteTime.dwLowDateTime=0x4c130c00, ftLastWriteTime.dwHighDateTime=0x1cac6d9, nFileSizeHigh=0x0, nFileSizeLow=0x11c000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Core_x86.msi", cAlternateFileName="NETFX_~2.MSI")) returned 1 [0113.874] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf7cd9415, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x29222c7, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Extended.mzz", cAlternateFileName="NETFX_~2.MZZ")) returned 1 [0113.875] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2dbe0800, ftCreationTime.dwHighDateTime=0x1cac6fb, ftLastAccessTime.dwLowDateTime=0x2dbe0800, ftLastAccessTime.dwHighDateTime=0x1cac6fb, ftLastWriteTime.dwLowDateTime=0x2dbe0800, ftLastWriteTime.dwHighDateTime=0x1cac6fb, nFileSizeHigh=0x0, nFileSizeLow=0xd5000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Extended_x64.msi", cAlternateFileName="NETFX_~3.MSI")) returned 1 [0113.875] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x7626f700, ftCreationTime.dwHighDateTime=0x1cac6f6, ftLastAccessTime.dwLowDateTime=0x7626f700, ftLastAccessTime.dwHighDateTime=0x1cac6f6, ftLastWriteTime.dwLowDateTime=0x7626f700, ftLastWriteTime.dwHighDateTime=0x1cac6f6, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Extended_x86.msi", cAlternateFileName="NETFX_~4.MSI")) returned 1 [0113.877] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4a0f7400, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x4a0f7400, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x4a0f7400, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x426ae, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="ParameterInfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0113.877] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x19dedd00, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x19dedd00, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x19dedd00, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d200, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="RGB9RAST_x64.msi", cAlternateFileName="RGB9RA~1.MSI")) returned 1 [0113.877] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x177c8300, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x177c8300, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x177c8300, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x17200, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="RGB9Rast_x86.msi", cAlternateFileName="RGB9RA~2.MSI")) returned 1 [0113.877] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x13148, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Setup.exe", cAlternateFileName="")) returned 1 [0113.877] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0xc5158, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SetupEngine.dll", cAlternateFileName="SETUPE~1.DLL")) returned 1 [0113.877] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x48150, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SetupUi.dll", cAlternateFileName="")) returned 1 [0113.878] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5381000, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x5381000, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x5381000, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x75a8, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SetupUi.xsd", cAlternateFileName="")) returned 1 [0113.878] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6519be00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0x6519be00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0x6519be00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x17758, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SetupUtility.exe", cAlternateFileName="SETUPU~1.EXE")) returned 1 [0113.878] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0xa078, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SplashScreen.bmp", cAlternateFileName="SPLASH~1.BMP")) returned 1 [0113.878] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x143bc400, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0x143bc400, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x143bc400, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x23420, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0113.878] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3704, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Strings.xml", cAlternateFileName="")) returned 1 [0113.879] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x97f2, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0113.879] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0x19688, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="watermark.bmp", cAlternateFileName="WATERM~1.BMP")) returned 1 [0113.879] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0x2120bc00, ftLastWriteTime.dwHighDateTime=0x1cac6c9, nFileSizeHigh=0x0, nFileSizeLow=0x4f5113, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows6.0-KB956250-v6001-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0113.879] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0x1bbe7400, ftLastWriteTime.dwHighDateTime=0x1cac6bf, nFileSizeHigh=0x0, nFileSizeLow=0x217520, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows6.0-KB956250-v6001-x86.msu", cAlternateFileName="WINDOW~2.MSU")) returned 1 [0113.879] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x5b8e5700, ftLastWriteTime.dwHighDateTime=0x1cac6d1, nFileSizeHigh=0x0, nFileSizeLow=0x4db1ce, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows6.1-KB958488-v6001-x64.msu", cAlternateFileName="WINDOW~3.MSU")) returned 1 [0113.879] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 1 [0113.880] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 0 [0113.880] FindClose (in: hFindFile=0xaf9638 | out: hFindFile=0xaf9638) returned 1 [0113.883] GetProcessHeap () returned 0xae0000 [0113.883] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb740d0 | out: hHeap=0xae0000) returned 1 [0113.883] FindNextFileW (in: hFindFile=0xaf95f8, lpFindFileData=0x2b6f958 | out: lpFindFileData=0x2b6f958*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6fa258, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1b09b8d, dwReserved1=0x745f9fc4, cFileName="Boot", cAlternateFileName="")) returned 1 [0113.883] GetProcessHeap () returned 0xae0000 [0113.883] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0xb740d0 [0113.884] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\*", lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0xaf9638 [0113.887] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0113.889] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xac3efa99, ftLastAccessTime.dwHighDateTime=0x1d4d5d3, ftLastWriteTime.dwLowDateTime=0xac3efa99, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="BCD", cAlternateFileName="")) returned 1 [0113.889] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0113.889] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0113.890] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0113.890] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0113.890] GetProcessHeap () returned 0xae0000 [0113.890] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0113.890] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\bg-BG\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0113.891] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="..", cAlternateFileName="")) returned 1 [0113.891] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0113.891] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0113.891] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0113.892] GetProcessHeap () returned 0xae0000 [0113.892] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0113.892] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4e6d79, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef4e6d79, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x175a0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="bootspaces.dll", cAlternateFileName="BOOTSP~1.DLL")) returned 1 [0113.892] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xef703e94, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0113.892] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef4fcd12, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x185a0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="bootvhd.dll", cAlternateFileName="")) returned 1 [0113.892] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0113.892] GetProcessHeap () returned 0xae0000 [0113.893] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0113.893] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0113.894] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="..", cAlternateFileName="")) returned 1 [0113.894] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2109581d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b58, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0113.894] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f1d4cf, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0113.894] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f1d4cf, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0113.895] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0113.895] GetProcessHeap () returned 0xae0000 [0113.895] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0113.895] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="da-DK", cAlternateFileName="")) returned 1 [0113.895] GetProcessHeap () returned 0xae0000 [0113.895] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0113.895] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\da-DK\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName=".", cAlternateFileName="")) returned 0xaf9138 [0113.897] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="..", cAlternateFileName="")) returned 1 [0113.897] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0113.897] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5252b3, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0113.897] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5252b3, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0113.897] FindClose (in: hFindFile=0xaf9138 | out: hFindFile=0xaf9138) returned 1 [0114.783] GetProcessHeap () returned 0xae0000 [0114.783] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0114.783] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="de-DE", cAlternateFileName="")) returned 1 [0114.784] GetProcessHeap () returned 0xae0000 [0114.784] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0114.784] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\de-DE\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0114.784] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="..", cAlternateFileName="")) returned 1 [0114.784] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48079da, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0114.785] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef538bee, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0114.785] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef538bee, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0114.785] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0114.785] GetProcessHeap () returned 0xae0000 [0114.785] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0114.785] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="el-GR", cAlternateFileName="")) returned 1 [0114.785] GetProcessHeap () returned 0xae0000 [0114.785] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0114.786] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\el-GR\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0114.797] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="..", cAlternateFileName="")) returned 1 [0114.797] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13960, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0114.797] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb5a0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0114.797] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb5a0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0114.797] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0114.798] GetProcessHeap () returned 0xae0000 [0114.798] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0114.798] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="en-GB", cAlternateFileName="")) returned 1 [0114.798] GetProcessHeap () returned 0xae0000 [0114.798] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0114.798] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\en-GB\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName=".", cAlternateFileName="")) returned 0xaf97f8 [0114.800] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="..", cAlternateFileName="")) returned 1 [0114.800] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12158, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0114.800] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12158, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0114.800] FindClose (in: hFindFile=0xaf97f8 | out: hFindFile=0xaf97f8) returned 1 [0114.800] GetProcessHeap () returned 0xae0000 [0114.800] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0114.800] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="en-US", cAlternateFileName="")) returned 1 [0114.800] GetProcessHeap () returned 0xae0000 [0114.801] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0114.801] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\en-US\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0114.801] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="..", cAlternateFileName="")) returned 1 [0114.801] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef569843, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x327294d0, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x121a0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0114.801] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0114.801] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0114.802] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0114.802] GetProcessHeap () returned 0xae0000 [0114.802] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0114.802] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="es-ES", cAlternateFileName="")) returned 1 [0114.802] GetProcessHeap () returned 0xae0000 [0114.802] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0114.802] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\es-ES\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName=".", cAlternateFileName="")) returned 0xaf97f8 [0114.804] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="..", cAlternateFileName="")) returned 1 [0114.804] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0114.804] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef586d37, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0114.804] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef586d37, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0114.804] FindClose (in: hFindFile=0xaf97f8 | out: hFindFile=0xaf97f8) returned 1 [0114.805] GetProcessHeap () returned 0xae0000 [0114.805] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0114.805] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="es-MX", cAlternateFileName="")) returned 1 [0114.805] GetProcessHeap () returned 0xae0000 [0114.805] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0114.805] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\es-MX\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName=".", cAlternateFileName="")) returned 0xaf97f8 [0114.807] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="..", cAlternateFileName="")) returned 1 [0114.807] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0114.807] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0114.807] FindClose (in: hFindFile=0xaf97f8 | out: hFindFile=0xaf97f8) returned 1 [0114.807] GetProcessHeap () returned 0xae0000 [0114.807] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0114.807] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="et-EE", cAlternateFileName="")) returned 1 [0114.807] GetProcessHeap () returned 0xae0000 [0114.808] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0114.808] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\et-EE\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0114.808] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="..", cAlternateFileName="")) returned 1 [0114.808] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12560, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0114.808] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12560, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0114.808] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0114.809] GetProcessHeap () returned 0xae0000 [0114.809] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0114.809] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0114.809] GetProcessHeap () returned 0xae0000 [0114.809] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0114.809] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fi-FI\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0114.811] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="..", cAlternateFileName="")) returned 1 [0114.811] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0114.811] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef59a5b1, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0114.811] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef59a5b1, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0114.811] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0114.811] GetProcessHeap () returned 0xae0000 [0114.811] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0114.812] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Fonts", cAlternateFileName="")) returned 1 [0114.812] GetProcessHeap () returned 0xae0000 [0114.812] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0114.812] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Fonts\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName=".", cAlternateFileName="")) returned 0xaf97f8 [0114.817] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="..", cAlternateFileName="")) returned 1 [0114.817] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef782dd9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x386467, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0114.817] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a1dbea, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef81cc08, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e0a, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0114.817] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a902c2, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8771a7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1e4d4b, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0114.817] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b4eed5, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8c4060, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x243588, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0114.818] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8e28b4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2ab6f, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="malgunn_boot.ttf", cAlternateFileName="MALGUN~1.TTF")) returned 1 [0114.818] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8f4db4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2b506, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="malgun_boot.ttf", cAlternateFileName="MALGUN~2.TTF")) returned 1 [0114.818] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9072c7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2318a, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="meiryon_boot.ttf", cAlternateFileName="MEIRYO~1.TTF")) returned 1 [0114.818] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef918492, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2380b, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="meiryo_boot.ttf", cAlternateFileName="MEIRYO~2.TTF")) returned 1 [0114.818] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef92a947, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x27a1b, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="msjhn_boot.ttf", cAlternateFileName="MSJHN_~1.TTF")) returned 1 [0114.818] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef93ce3b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x281fb, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="msjh_boot.ttf", cAlternateFileName="MSJH_B~1.TTF")) returned 1 [0114.819] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef94dfcd, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x25b3b, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="msyhn_boot.ttf", cAlternateFileName="MSYHN_~1.TTF")) returned 1 [0114.819] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef95f141, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x26255, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="msyh_boot.ttf", cAlternateFileName="MSYH_B~1.TTF")) returned 1 [0114.820] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef96ef3e, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf3b, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="segmono_boot.ttf", cAlternateFileName="SEGMON~1.TTF")) returned 1 [0114.820] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c0da69, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef97d9ab, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x14f66, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="segoen_slboot.ttf", cAlternateFileName="SEGOEN~1.TTF")) returned 1 [0114.820] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef98c419, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x150a2, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="segoe_slboot.ttf", cAlternateFileName="SEGOE_~1.TTF")) returned 1 [0114.820] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef999ae4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1 [0114.820] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef999ae4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 0 [0114.821] FindClose (in: hFindFile=0xaf97f8 | out: hFindFile=0xaf97f8) returned 1 [0114.823] GetProcessHeap () returned 0xae0000 [0114.823] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0114.823] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="fr-CA", cAlternateFileName="")) returned 1 [0114.823] GetProcessHeap () returned 0xae0000 [0114.823] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0114.823] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fr-CA\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0114.825] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="..", cAlternateFileName="")) returned 1 [0114.825] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0114.825] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0114.825] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0114.825] GetProcessHeap () returned 0xae0000 [0114.825] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0114.825] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0114.825] GetProcessHeap () returned 0xae0000 [0114.826] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0114.826] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fr-FR\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName=".", cAlternateFileName="")) returned 0xaf97f8 [0114.826] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="..", cAlternateFileName="")) returned 1 [0114.826] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13558, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0114.826] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ade2b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0114.826] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ade2b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0114.827] FindClose (in: hFindFile=0xaf97f8 | out: hFindFile=0xaf97f8) returned 1 [0114.827] GetProcessHeap () returned 0xae0000 [0114.827] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0114.827] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="hr-HR", cAlternateFileName="")) returned 1 [0114.827] GetProcessHeap () returned 0xae0000 [0114.827] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0114.827] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\hr-HR\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0114.829] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="..", cAlternateFileName="")) returned 1 [0114.829] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0114.829] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0114.829] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0114.829] GetProcessHeap () returned 0xae0000 [0114.829] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0114.829] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0114.829] GetProcessHeap () returned 0xae0000 [0114.830] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0114.830] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\hu-HU\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName=".", cAlternateFileName="")) returned 0xaf97f8 [0114.830] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="..", cAlternateFileName="")) returned 1 [0114.830] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13360, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0114.830] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5c171b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39d81d8, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb398, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0114.830] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5c171b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39d81d8, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb398, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0114.831] FindClose (in: hFindFile=0xaf97f8 | out: hFindFile=0xaf97f8) returned 1 [0114.831] GetProcessHeap () returned 0xae0000 [0114.831] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0114.831] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="it-IT", cAlternateFileName="")) returned 1 [0114.831] GetProcessHeap () returned 0xae0000 [0114.831] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0114.831] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\it-IT\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0114.833] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="..", cAlternateFileName="")) returned 1 [0114.833] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0114.833] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5d8ab4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf30285aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0114.833] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5d8ab4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf30285aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0114.833] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0114.833] GetProcessHeap () returned 0xae0000 [0114.833] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0114.833] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0114.834] GetProcessHeap () returned 0xae0000 [0114.834] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0114.834] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ja-JP\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0115.245] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="..", cAlternateFileName="")) returned 1 [0115.267] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48c6596, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10760, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.267] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ed6c6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf300233f, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa798, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0115.268] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ed6c6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf300233f, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa798, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0115.268] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0115.268] GetProcessHeap () returned 0xae0000 [0115.268] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0115.268] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0115.268] GetProcessHeap () returned 0xae0000 [0115.268] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0115.268] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ko-KR\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0115.269] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="..", cAlternateFileName="")) returned 1 [0115.269] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211c6af1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10560, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.269] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fdc0d7, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa7a0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0115.269] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fdc0d7, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa7a0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0115.269] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0115.269] GetProcessHeap () returned 0xae0000 [0115.269] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0115.270] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="lt-LT", cAlternateFileName="")) returned 1 [0115.270] GetProcessHeap () returned 0xae0000 [0115.270] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0115.270] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\lt-LT\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0115.270] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="..", cAlternateFileName="")) returned 1 [0115.270] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.270] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0115.271] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0115.271] GetProcessHeap () returned 0xae0000 [0115.271] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0115.271] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="lv-LV", cAlternateFileName="")) returned 1 [0115.271] GetProcessHeap () returned 0xae0000 [0115.271] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0115.271] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\lv-LV\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName=".", cAlternateFileName="")) returned 0xaf9138 [0115.271] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="..", cAlternateFileName="")) returned 1 [0115.271] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12758, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.272] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12758, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0115.272] FindClose (in: hFindFile=0xaf9138 | out: hFindFile=0xaf9138) returned 1 [0115.272] GetProcessHeap () returned 0xae0000 [0115.272] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0115.273] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6196d8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbcf473f, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xc63a0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0115.273] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0115.274] GetProcessHeap () returned 0xae0000 [0115.274] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0115.274] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nb-NO\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0115.274] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="..", cAlternateFileName="")) returned 1 [0115.274] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.274] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef62cf52, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0115.274] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef62cf52, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0115.275] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0115.275] GetProcessHeap () returned 0xae0000 [0115.275] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0115.275] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0115.275] GetProcessHeap () returned 0xae0000 [0115.275] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0115.275] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nl-NL\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName=".", cAlternateFileName="")) returned 0xaf9138 [0115.275] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="..", cAlternateFileName="")) returned 1 [0115.276] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13160, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.276] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6407cf, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0115.276] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6407cf, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0115.276] FindClose (in: hFindFile=0xaf9138 | out: hFindFile=0xaf9138) returned 1 [0115.276] GetProcessHeap () returned 0xae0000 [0115.276] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0115.276] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0115.276] GetProcessHeap () returned 0xae0000 [0115.276] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0115.277] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pl-PL\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0115.277] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="..", cAlternateFileName="")) returned 1 [0115.277] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f58, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.277] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0115.277] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0115.277] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0115.278] GetProcessHeap () returned 0xae0000 [0115.278] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0115.278] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0115.278] GetProcessHeap () returned 0xae0000 [0115.278] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0115.278] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-BR\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0115.278] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="..", cAlternateFileName="")) returned 1 [0115.278] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.279] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65dc94, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0115.279] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65dc94, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0115.279] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0115.279] GetProcessHeap () returned 0xae0000 [0115.279] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0115.279] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0115.279] GetProcessHeap () returned 0xae0000 [0115.279] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0115.279] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-PT\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0115.280] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="..", cAlternateFileName="")) returned 1 [0115.280] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.280] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6714dc, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0115.280] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6714dc, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0115.280] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0115.280] GetProcessHeap () returned 0xae0000 [0115.280] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0115.281] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="qps-ploc", cAlternateFileName="")) returned 1 [0115.281] GetProcessHeap () returned 0xae0000 [0115.281] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0115.281] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0115.281] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="..", cAlternateFileName="")) returned 1 [0115.281] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12160, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.281] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef684d85, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbd1a998, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xd398, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0115.282] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef684d85, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbd1a998, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xd398, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0115.282] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0115.282] GetProcessHeap () returned 0xae0000 [0115.282] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0115.282] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1 [0115.282] GetProcessHeap () returned 0xae0000 [0115.282] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0115.282] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Resources\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0115.282] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="..", cAlternateFileName="")) returned 1 [0115.283] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9abff9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef597530, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x169a0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="bootres.dll", cAlternateFileName="")) returned 1 [0115.283] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="en-US", cAlternateFileName="")) returned 1 [0115.283] GetProcessHeap () returned 0xae0000 [0115.283] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3411070 [0115.283] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Resources\\en-US\\*", lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffe196, cFileName=".", cAlternateFileName="")) returned 0xaf97f8 [0115.284] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffe196, cFileName="..", cAlternateFileName="")) returned 1 [0115.284] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9baa67, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31acad58, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0xffffe196, cFileName="bootres.dll.mui", cAlternateFileName="BOOTRE~1.MUI")) returned 1 [0115.284] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9baa67, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31acad58, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0xffffe196, cFileName="bootres.dll.mui", cAlternateFileName="BOOTRE~1.MUI")) returned 0 [0115.284] FindClose (in: hFindFile=0xaf97f8 | out: hFindFile=0xaf97f8) returned 1 [0115.284] GetProcessHeap () returned 0xae0000 [0115.284] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3411070 | out: hHeap=0xae0000) returned 1 [0115.285] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="en-US", cAlternateFileName="")) returned 0 [0115.285] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0115.285] GetProcessHeap () returned 0xae0000 [0115.285] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0115.287] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="ro-RO", cAlternateFileName="")) returned 1 [0115.287] GetProcessHeap () returned 0xae0000 [0115.287] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0115.288] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ro-RO\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0115.289] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="..", cAlternateFileName="")) returned 1 [0115.289] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.289] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0115.290] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0115.290] GetProcessHeap () returned 0xae0000 [0115.290] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0115.290] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0115.290] GetProcessHeap () returned 0xae0000 [0115.290] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0115.290] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ru-RU\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0115.727] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="..", cAlternateFileName="")) returned 1 [0115.727] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.728] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0115.728] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0115.728] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0115.728] GetProcessHeap () returned 0xae0000 [0115.728] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0115.728] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="sk-SK", cAlternateFileName="")) returned 1 [0115.728] GetProcessHeap () returned 0xae0000 [0115.729] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0115.729] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sk-SK\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0115.729] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="..", cAlternateFileName="")) returned 1 [0115.730] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.730] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0115.730] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0115.730] GetProcessHeap () returned 0xae0000 [0115.730] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0115.730] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="sl-SI", cAlternateFileName="")) returned 1 [0115.730] GetProcessHeap () returned 0xae0000 [0115.730] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0115.730] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sl-SI\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0115.732] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="..", cAlternateFileName="")) returned 1 [0115.732] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.732] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0115.732] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0115.732] GetProcessHeap () returned 0xae0000 [0115.732] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0115.733] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1 [0115.733] GetProcessHeap () returned 0xae0000 [0115.733] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0115.733] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName=".", cAlternateFileName="")) returned 0xaf9838 [0115.733] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="..", cAlternateFileName="")) returned 1 [0115.733] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.734] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0115.734] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0115.734] FindClose (in: hFindFile=0xaf9838 | out: hFindFile=0xaf9838) returned 1 [0115.734] GetProcessHeap () returned 0xae0000 [0115.734] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0115.734] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~2")) returned 1 [0115.734] GetProcessHeap () returned 0xae0000 [0115.734] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0115.734] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sr-Latn-RS\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0115.736] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="..", cAlternateFileName="")) returned 1 [0115.736] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.736] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0115.736] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0115.737] GetProcessHeap () returned 0xae0000 [0115.737] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0115.737] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0115.737] GetProcessHeap () returned 0xae0000 [0115.737] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0115.737] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sv-SE\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0115.738] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="..", cAlternateFileName="")) returned 1 [0115.739] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.739] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0115.739] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0115.739] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0115.739] GetProcessHeap () returned 0xae0000 [0115.739] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0115.740] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0115.740] GetProcessHeap () returned 0xae0000 [0115.740] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0115.740] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\tr-TR\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0115.741] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="..", cAlternateFileName="")) returned 1 [0115.741] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12558, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.741] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0115.742] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0115.742] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0115.742] GetProcessHeap () returned 0xae0000 [0115.742] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0115.742] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="uk-UA", cAlternateFileName="")) returned 1 [0115.742] GetProcessHeap () returned 0xae0000 [0115.742] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0115.742] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\uk-UA\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0115.744] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="..", cAlternateFileName="")) returned 1 [0115.744] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.744] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0115.744] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0115.744] GetProcessHeap () returned 0xae0000 [0115.744] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0115.744] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef6c9427, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef6c9427, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1236, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="updaterevokesipolicy.p7b", cAlternateFileName="UPDATE~1.P7B")) returned 1 [0115.744] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0115.745] GetProcessHeap () returned 0xae0000 [0115.745] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0115.745] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-CN\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0115.746] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="..", cAlternateFileName="")) returned 1 [0115.746] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.746] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6d7e9a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa5a0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0115.746] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6d7e9a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa5a0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0115.747] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0115.747] GetProcessHeap () returned 0xae0000 [0115.747] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0115.747] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0115.747] GetProcessHeap () returned 0xae0000 [0115.747] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0115.747] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-HK\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName=".", cAlternateFileName="")) returned 0xaf97f8 [0115.748] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="..", cAlternateFileName="")) returned 1 [0115.748] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf958, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.748] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x518ea25e, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe31db522, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xa558, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0115.748] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x518ea25e, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe31db522, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xa558, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0115.748] FindClose (in: hFindFile=0xaf97f8 | out: hFindFile=0xaf97f8) returned 1 [0115.749] GetProcessHeap () returned 0xae0000 [0115.749] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0115.749] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0115.749] GetProcessHeap () returned 0xae0000 [0115.749] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f1060 [0115.749] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-TW\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName=".", cAlternateFileName="")) returned 0xaf9838 [0115.750] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="..", cAlternateFileName="")) returned 1 [0115.750] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.751] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa598, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0115.751] FindNextFileW (in: hFindFile=0xaf9838, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa598, dwReserved0=0x0, dwReserved1=0xffffc595, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0115.751] FindClose (in: hFindFile=0xaf9838 | out: hFindFile=0xaf9838) returned 1 [0115.751] GetProcessHeap () returned 0xae0000 [0115.751] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f1060 | out: hHeap=0xae0000) returned 1 [0115.751] FindNextFileW (in: hFindFile=0xaf9638, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0115.751] FindClose (in: hFindFile=0xaf9638 | out: hFindFile=0xaf9638) returned 1 [0115.751] GetProcessHeap () returned 0xae0000 [0115.752] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb740d0 | out: hHeap=0xae0000) returned 1 [0115.753] FindNextFileW (in: hFindFile=0xaf95f8, lpFindFileData=0x2b6f958 | out: lpFindFileData=0x2b6f958*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xe47a48a8, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfb90936b, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0x607da, dwReserved0=0x1b09b8d, dwReserved1=0x745f9fc4, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0115.753] FindNextFileW (in: hFindFile=0xaf95f8, lpFindFileData=0x2b6f958 | out: lpFindFileData=0x2b6f958*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5533ee0, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef9d0a0c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x1b09b8d, dwReserved1=0x745f9fc4, cFileName="BOOTNXT", cAlternateFileName="")) returned 1 [0115.754] FindNextFileW (in: hFindFile=0xaf95f8, lpFindFileData=0x2b6f958 | out: lpFindFileData=0x2b6f958*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xc4ee267e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4ee267e, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xf1c63cdd, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x1b09b8d, dwReserved1=0x745f9fc4, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0115.754] FindNextFileW (in: hFindFile=0xaf95f8, lpFindFileData=0x2b6f958 | out: lpFindFileData=0x2b6f958*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x745f9fc4, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0115.754] FindNextFileW (in: hFindFile=0xaf95f8, lpFindFileData=0x2b6f958 | out: lpFindFileData=0x2b6f958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x745f9fc4, cFileName="ESD", cAlternateFileName="")) returned 1 [0115.754] GetProcessHeap () returned 0xae0000 [0115.754] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0xb740d0 [0115.755] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ESD\\*", lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0xaf9538 [0116.004] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0116.009] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 0 [0116.012] FindClose (in: hFindFile=0xaf9538 | out: hFindFile=0xaf9538) returned 1 [0116.070] GetProcessHeap () returned 0xae0000 [0116.070] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb740d0 | out: hHeap=0xae0000) returned 1 [0116.070] FindNextFileW (in: hFindFile=0xaf95f8, lpFindFileData=0x2b6f958 | out: lpFindFileData=0x2b6f958*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7ef2dddf, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x7ef2dddf, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3d7ebe9, ftLastWriteTime.dwHighDateTime=0x1d4d600, nFileSizeHigh=0x0, nFileSizeLow=0x332fe000, dwReserved0=0xa0000003, dwReserved1=0x745f9fc4, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0116.070] FindNextFileW (in: hFindFile=0xaf95f8, lpFindFileData=0x2b6f958 | out: lpFindFileData=0x2b6f958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x745f9fc4, cFileName="Logs", cAlternateFileName="")) returned 1 [0116.070] GetProcessHeap () returned 0xae0000 [0116.071] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0xb740d0 [0116.071] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Logs\\*", lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0xaf91f8 [0116.071] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0116.071] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5052fa31, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5052fa31, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Application.evtx", cAlternateFileName="APPLIC~1.EVT")) returned 1 [0116.072] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505ee5f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505ee5f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="HardwareEvents.evtx", cAlternateFileName="HARDWA~1.EVT")) returned 1 [0116.072] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505a2134, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505a2134, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Internet Explorer.evtx", cAlternateFileName="INTERN~1.EVT")) returned 1 [0116.072] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5057bed8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5057bed8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Key Management Service.evtx", cAlternateFileName="KEYMAN~1.EVT")) returned 1 [0116.072] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1dbd7c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1dbd7c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Client-Licensing-Platform%4Admin.evtx", cAlternateFileName="MICROS~1.EVT")) returned 1 [0116.072] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5d836e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5d836e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx", cAlternateFileName="MICROS~2.EVT")) returned 1 [0116.073] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9206ac5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9206ac5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9c0f529, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx", cAlternateFileName="MICROS~3.EVT")) returned 1 [0116.073] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppLocker%4EXE and DLL.evtx", cAlternateFileName="MICROS~4.EVT")) returned 1 [0116.073] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4169a7a, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4169a7a, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppLocker%4MSI and Script.evtx", cAlternateFileName="MI2EEA~1.EVT")) returned 1 [0116.073] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx", cAlternateFileName="MI07E1~1.EVT")) returned 1 [0116.073] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx", cAlternateFileName="MI8196~1.EVT")) returned 1 [0116.073] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41b5f2d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd41b5f2d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppModel-Runtime%4Admin.evtx", cAlternateFileName="MIE36C~1.EVT")) returned 1 [0116.074] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd389efbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd389efbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppReadiness%4Admin.evtx", cAlternateFileName="MIC5CB~1.EVT")) returned 1 [0116.074] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd38c5212, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd38c5212, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppReadiness%4Operational.evtx", cAlternateFileName="MIF8AA~1.EVT")) returned 1 [0116.074] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppXDeployment%4Operational.evtx", cAlternateFileName="MI34FE~1.EVT")) returned 1 [0116.074] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x211000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppXDeploymentServer%4Operational.evtx", cAlternateFileName="MIA24C~1.EVT")) returned 1 [0116.074] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx", cAlternateFileName="MIDBEC~1.EVT")) returned 1 [0116.075] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85798667, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x85798667, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-AppxPackaging%4Operational.evtx", cAlternateFileName="MI54F1~1.EVT")) returned 1 [0116.075] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74d25ab, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74d25ab, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx", cAlternateFileName="MI111F~1.EVT")) returned 1 [0116.075] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f96ca4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe1f96ca4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Bits-Client%4Operational.evtx", cAlternateFileName="MI9465~1.EVT")) returned 1 [0116.075] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8783aa15, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8783aa15, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-CodeIntegrity%4Operational.evtx", cAlternateFileName="MI03A7~1.EVT")) returned 1 [0116.076] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3c71c5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3c71c5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx", cAlternateFileName="MI5CA2~1.EVT")) returned 1 [0116.076] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx", cAlternateFileName="MI5FD1~1.EVT")) returned 1 [0116.076] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Crypto-DPAPI%4Operational.evtx", cAlternateFileName="MI8BDF~1.EVT")) returned 1 [0116.076] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3ed420, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3ed420, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx", cAlternateFileName="MIAEBD~1.EVT")) returned 1 [0116.076] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cef47f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cef47f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-DeviceSetupManager%4Admin.evtx", cAlternateFileName="MIA726~1.EVT")) returned 1 [0116.077] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-DeviceSetupManager%4Operational.evtx", cAlternateFileName="MI08CB~1.EVT")) returned 1 [0116.077] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc967f17e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc967f17e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Dhcp-Client%4Admin.evtx", cAlternateFileName="MI8270~1.EVT")) returned 1 [0116.077] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc96cb64b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc96cb64b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Dhcpv6-Client%4Admin.evtx", cAlternateFileName="MIEBFF~1.EVT")) returned 1 [0116.077] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64aa7b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca64aa7b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Diagnosis-DPS%4Operational.evtx", cAlternateFileName="MI9F85~1.EVT")) returned 1 [0116.077] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd9ec80, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xfd9ec80, ftLastAccessTime.dwHighDateTime=0x1d1a04f, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Diagnostics-Performance%4Operational.evtx", cAlternateFileName="MIBE3D~1.EVT")) returned 1 [0116.077] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9658ef3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9658ef3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-GroupPolicy%4Operational.evtx", cAlternateFileName="MIE38D~1.EVT")) returned 1 [0116.078] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9dcc480, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9dcc480, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-HotspotAuth%4Operational.evtx", cAlternateFileName="MIE386~1.EVT")) returned 1 [0116.078] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b4bacf, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b4bacf, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx", cAlternateFileName="MI6B25~1.EVT")) returned 1 [0116.078] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb66288f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-International%4Operational.evtx", cAlternateFileName="MI854A~1.EVT")) returned 1 [0116.078] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x506ad1ac, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x506ad1ac, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Kernel-Boot%4Operational.evtx", cAlternateFileName="MI32CE~1.EVT")) returned 1 [0116.078] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Kernel-EventTracing%4Admin.evtx", cAlternateFileName="MIA934~1.EVT")) returned 1 [0116.079] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5071f8b0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5071f8b0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Kernel-PnP%4Configuration.evtx", cAlternateFileName="MIB32D~1.EVT")) returned 1 [0116.079] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8ebf6d7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc8ebf6d7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx", cAlternateFileName="MICA77~1.EVT")) returned 1 [0116.079] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5090f75d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5090f75d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx", cAlternateFileName="MI1E8D~1.EVT")) returned 1 [0116.079] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd75102f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd75102f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx", cAlternateFileName="MID067~1.EVT")) returned 1 [0116.080] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Kernel-WHEA%4Errors.evtx", cAlternateFileName="MIDE4D~1.EVT")) returned 1 [0116.080] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Kernel-WHEA%4Operational.evtx", cAlternateFileName="MI36C5~1.EVT")) returned 1 [0116.080] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59547c37, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x59547c37, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Known Folders API Service.evtx", cAlternateFileName="MI86D6~1.EVT")) returned 1 [0116.080] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb7386e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbb7386e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-LiveId%4Operational.evtx", cAlternateFileName="MI4C58~1.EVT")) returned 1 [0116.080] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93d06f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93d06f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-MUI%4Admin.evtx", cAlternateFileName="MI30D3~1.EVT")) returned 1 [0116.081] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93aa49b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93aa49b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-MUI%4Operational.evtx", cAlternateFileName="MI6F01~1.EVT")) returned 1 [0116.081] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9d33b19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9d33b19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-NCSI%4Operational.evtx", cAlternateFileName="MI483C~1.EVT")) returned 1 [0116.081] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbcf0ff2, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbcf0ff2, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-NetworkProfile%4Operational.evtx", cAlternateFileName="MIFC66~1.EVT")) returned 1 [0116.081] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ab3154, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ab3154, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Ntfs%4Operational.evtx", cAlternateFileName="MI6E98~1.EVT")) returned 1 [0116.081] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ad9393, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ad9393, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Ntfs%4WHC.evtx", cAlternateFileName="MIB2AC~1.EVT")) returned 1 [0116.082] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5fe5cb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5fe5cb, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx", cAlternateFileName="MI6AFE~1.EVT")) returned 1 [0116.082] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe24cdef0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe24cdef0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-ReadyBoost%4Operational.evtx", cAlternateFileName="MIB9D2~1.EVT")) returned 1 [0116.082] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd125335f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd125335f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx", cAlternateFileName="MI7A67~1.EVT")) returned 1 [0116.082] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-SettingSync%4Debug.evtx", cAlternateFileName="MI3773~1.EVT")) returned 1 [0116.082] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-SettingSync%4Operational.evtx", cAlternateFileName="MI36AA~1.EVT")) returned 1 [0116.082] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Shell-Core%4ActionCenter.evtx", cAlternateFileName="MI2E2E~1.EVT")) returned 1 [0116.083] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Shell-Core%4Operational.evtx", cAlternateFileName="MI1C6C~1.EVT")) returned 1 [0116.083] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-SmbClient%4Connectivity.evtx", cAlternateFileName="MI00FB~1.EVT")) returned 1 [0116.083] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97b042f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97b042f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-SMBClient%4Operational.evtx", cAlternateFileName="MID8B0~1.EVT")) returned 1 [0116.083] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-SmbClient%4Security.evtx", cAlternateFileName="MI8CEE~1.EVT")) returned 1 [0116.083] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb1ea1c9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb1ea1c9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-SMBServer%4Audit.evtx", cAlternateFileName="MIE3AD~1.EVT")) returned 1 [0116.084] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb19dd19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb19dd19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-SMBServer%4Connectivity.evtx", cAlternateFileName="MI8248~1.EVT")) returned 1 [0116.084] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb151873, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb151873, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-SMBServer%4Operational.evtx", cAlternateFileName="MI4B6B~1.EVT")) returned 1 [0116.085] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb177aca, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb177aca, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-SMBServer%4Security.evtx", cAlternateFileName="MI7709~1.EVT")) returned 1 [0116.085] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd751ea61, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd751ea61, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Store%4Operational.evtx", cAlternateFileName="MICEDD~1.EVT")) returned 1 [0116.085] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd0763ff, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd0763ff, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-TaskScheduler%4Maintenance.evtx", cAlternateFileName="MIE2F0~1.EVT")) returned 1 [0116.085] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5089d037, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5089d037, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx", cAlternateFileName="MIAB1D~1.EVT")) returned 1 [0116.086] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x508c32a6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x508c32a6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx", cAlternateFileName="MI62D3~1.EVT")) returned 1 [0116.086] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc14341c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc14341c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx", cAlternateFileName="MIEC03~1.EVT")) returned 1 [0116.086] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1b5b23, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1b5b23, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx", cAlternateFileName="MI1F5D~1.EVT")) returned 1 [0116.086] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74ac348, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74ac348, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-TWinUI%4Operational.evtx", cAlternateFileName="MIA925~1.EVT")) returned 1 [0116.086] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50aff605, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50aff605, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-User Profile Service%4Operational.evtx", cAlternateFileName="MI4D4C~1.EVT")) returned 1 [0116.087] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50981e6e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50981e6e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-UserPnp%4ActionCenter.evtx", cAlternateFileName="MI5FF0~1.EVT")) returned 1 [0116.087] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5095bc04, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5095bc04, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-UserPnp%4DeviceInstall.evtx", cAlternateFileName="MIBD88~1.EVT")) returned 1 [0116.087] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b97f64, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b97f64, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx", cAlternateFileName="MICC17~1.EVT")) returned 1 [0116.087] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc986efe1, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc986efe1, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Wcmsvc%4Operational.evtx", cAlternateFileName="MI72BF~1.EVT")) returned 1 [0116.087] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb426548, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb426548, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Windows Defender%4Operational.evtx", cAlternateFileName="MI7501~1.EVT")) returned 1 [0116.087] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb4729e7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb4729e7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Windows Defender%4WHC.evtx", cAlternateFileName="MIF226~1.EVT")) returned 1 [0116.088] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4b19353, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4b19353, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx", cAlternateFileName="MIDCC7~1.EVT")) returned 1 [0116.088] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9c9b1b6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9c9b1b6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx", cAlternateFileName="MI7771~1.EVT")) returned 1 [0116.088] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9df26e9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9df26e9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx", cAlternateFileName="MI4667~1.EVT")) returned 1 [0116.088] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd122d184, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd122d184, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-Winlogon%4Operational.evtx", cAlternateFileName="MID6AB~1.EVT")) returned 1 [0116.089] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf164b9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcf164b9b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft-Windows-WMI-Activity%4Operational.evtx", cAlternateFileName="MIFF83~1.EVT")) returned 1 [0116.089] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9a458f4, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Security.evtx", cAlternateFileName="SECURI~1.EVT")) returned 1 [0116.089] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a6db2c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x95a6db2c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Setup.evtx", cAlternateFileName="SETUP~1.EVT")) returned 1 [0116.089] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505097c4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505097c4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="System.evtx", cAlternateFileName="SYSTEM~1.EVT")) returned 1 [0116.089] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows PowerShell.evtx", cAlternateFileName="WINDOW~1.EVT")) returned 1 [0116.090] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows PowerShell.evtx", cAlternateFileName="WINDOW~1.EVT")) returned 0 [0116.090] FindClose (in: hFindFile=0xaf91f8 | out: hFindFile=0xaf91f8) returned 1 [0116.090] GetProcessHeap () returned 0xae0000 [0116.090] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb740d0 | out: hHeap=0xae0000) returned 1 [0116.090] FindNextFileW (in: hFindFile=0xaf95f8, lpFindFileData=0x2b6f958 | out: lpFindFileData=0x2b6f958*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6e97b025, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6e97b025, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0x47384f2, ftLastWriteTime.dwHighDateTime=0x1d4d600, nFileSizeHigh=0x0, nFileSizeLow=0x28000000, dwReserved0=0xa0000003, dwReserved1=0x745f9fc4, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0116.090] FindNextFileW (in: hFindFile=0xaf95f8, lpFindFileData=0x2b6f958 | out: lpFindFileData=0x2b6f958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x745f9fc4, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0116.090] GetProcessHeap () returned 0xae0000 [0116.090] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0xb740d0 [0116.091] FindFirstFileW (in: lpFileName="\\\\?\\C:\\PerfLogs\\*", lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0xaf97f8 [0116.093] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0116.093] FindNextFileW (in: hFindFile=0xaf97f8, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 0 [0116.093] FindClose (in: hFindFile=0xaf97f8 | out: hFindFile=0xaf97f8) returned 1 [0116.093] GetProcessHeap () returned 0xae0000 [0116.093] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb740d0 | out: hHeap=0xae0000) returned 1 [0116.093] FindNextFileW (in: hFindFile=0xaf95f8, lpFindFileData=0x2b6f958 | out: lpFindFileData=0x2b6f958*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x2ad909f6, ftLastAccessTime.dwHighDateTime=0x1d5c098, ftLastWriteTime.dwLowDateTime=0x2ad909f6, ftLastWriteTime.dwHighDateTime=0x1d5c098, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x745f9fc4, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0116.093] GetProcessHeap () returned 0xae0000 [0116.093] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0xb740d0 [0116.094] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\*", lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x2ad909f6, ftLastAccessTime.dwHighDateTime=0x1d5c098, ftLastWriteTime.dwLowDateTime=0x2ad909f6, ftLastWriteTime.dwHighDateTime=0x1d5c098, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0xaf9538 [0116.094] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x2ad909f6, ftLastAccessTime.dwHighDateTime=0x1d5c098, ftLastWriteTime.dwLowDateTime=0x2ad909f6, ftLastWriteTime.dwHighDateTime=0x1d5c098, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0116.094] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1 [0116.094] GetProcessHeap () returned 0xae0000 [0116.094] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f0058 [0116.096] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0116.097] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.097] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESIGNER", cAlternateFileName="")) returned 1 [0116.097] GetProcessHeap () returned 0xae0000 [0116.097] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3400060 [0116.098] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\*", lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffbd93, cFileName=".", cAlternateFileName="")) returned 0xaf9178 [0116.623] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffbd93, cFileName="..", cAlternateFileName="")) returned 1 [0116.623] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8c3a00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5c8c3a00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3e70, dwReserved0=0x0, dwReserved1=0xffffbd93, cFileName="MSADDNDR.OLB", cAlternateFileName="")) returned 1 [0116.623] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8c3a00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5c8c3a00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3e70, dwReserved0=0x0, dwReserved1=0xffffbd93, cFileName="MSADDNDR.OLB", cAlternateFileName="")) returned 0 [0116.624] FindClose (in: hFindFile=0xaf9178 | out: hFindFile=0xaf9178) returned 1 [0116.624] GetProcessHeap () returned 0xae0000 [0116.624] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3400060 | out: hHeap=0xae0000) returned 1 [0116.624] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft shared", cAlternateFileName="MICROS~1")) returned 1 [0116.624] GetProcessHeap () returned 0xae0000 [0116.624] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3400060 [0116.624] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\*", lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffbd93, cFileName=".", cAlternateFileName="")) returned 0xaf9138 [0116.625] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffbd93, cFileName="..", cAlternateFileName="")) returned 1 [0116.625] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x81028f76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffbd93, cFileName="ClickToRun", cAlternateFileName="CLICKT~1")) returned 1 [0116.625] GetProcessHeap () returned 0xae0000 [0116.625] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3440080 [0116.626] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\*", lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x81028f76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0116.626] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x81028f76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.627] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x809e6bf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x809e6bf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1 [0116.627] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x809e6bf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x809e6bf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1 [0116.627] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="API-MS~3.DLL")) returned 1 [0116.627] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="API-MS~4.DLL")) returned 1 [0116.628] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="APF10C~1.DLL")) returned 1 [0116.628] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1 [0116.628] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="APA632~1.DLL")) returned 1 [0116.628] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1 [0116.628] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1 [0116.628] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="APC00F~1.DLL")) returned 1 [0116.629] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="AP0479~1.DLL")) returned 1 [0116.629] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1 [0116.629] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1 [0116.629] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="APAE51~1.DLL")) returned 1 [0116.629] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x68c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1 [0116.630] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1 [0116.630] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="APFCAD~1.DLL")) returned 1 [0116.630] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="AP8F34~1.DLL")) returned 1 [0116.630] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="APD1B7~1.DLL")) returned 1 [0116.630] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="APBF0F~1.DLL")) returned 1 [0116.631] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1 [0116.631] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1 [0116.631] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb979f700, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x27c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApiClient.dll", cAlternateFileName="APICLI~1.DLL")) returned 1 [0116.631] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9bc01200, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0xa02d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVCatalog.dll", cAlternateFileName="APPVCA~1.DLL")) returned 1 [0116.631] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x1f5ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="appvcleaner.exe", cAlternateFileName="APPVCL~1.EXE")) returned 1 [0116.632] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a330a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a330a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x4b0d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVFileSystemMetadata.dll", cAlternateFileName="APPVFI~1.DLL")) returned 1 [0116.632] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a330a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a330a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x2052d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVIntegration.dll", cAlternateFileName="APPVIN~1.DLL")) returned 1 [0116.632] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a59305, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a59305, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x726d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVIsvApi.dll", cAlternateFileName="APPVIS~1.DLL")) returned 1 [0116.633] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe1b7300, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0x60ea0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppvIsvStream32.dll", cAlternateFileName="APPVIS~2.DLL")) returned 1 [0116.633] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb5e67000, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x73aa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppvIsvStream64.dll", cAlternateFileName="APPVIS~3.DLL")) returned 1 [0116.633] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x336d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVIsvStreamingManager.dll", cAlternateFileName="APPVIS~4.DLL")) returned 1 [0116.633] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80aa57b9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80aa57b9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x1566d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVIsvSubsystemController.dll", cAlternateFileName="AP213A~1.DLL")) returned 1 [0116.633] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80aa57b9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80aa57b9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x18d60800, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0x1ae0a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppvIsvSubsystems32.dll", cAlternateFileName="AP3342~1.DLL")) returned 1 [0116.634] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80acba0b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80acba0b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbbdc5100, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x22e0a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppvIsvSubsystems64.dll", cAlternateFileName="AP4400~1.DLL")) returned 1 [0116.634] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80af1c6a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80af1c6a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x8a8d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVIsvVirtualization.dll", cAlternateFileName="AP485B~1.DLL")) returned 1 [0116.634] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80af1c6a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80af1c6a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x12cad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVManifest.dll", cAlternateFileName="APPVMA~1.DLL")) returned 1 [0116.634] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b17ebf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b17ebf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0xe76d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVOrchestration.dll", cAlternateFileName="APPVOR~1.DLL")) returned 1 [0116.634] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b17ebf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b17ebf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x13c4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVPolicy.dll", cAlternateFileName="APPVPO~1.DLL")) returned 1 [0116.634] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b17ebf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b17ebf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9e226c00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x7d0d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVScripting.dll", cAlternateFileName="APPVSC~1.DLL")) returned 1 [0116.635] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9e226c00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x406d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVShNotify.exe", cAlternateFileName="APPVSH~1.EXE")) returned 1 [0116.635] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x14115400, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0xc84c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2R32.dll", cAlternateFileName="")) returned 1 [0116.635] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb4b54300, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x127260, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2R64.dll", cAlternateFileName="")) returned 1 [0116.635] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8ee04f00, ftLastWriteTime.dwHighDateTime=0x1d0d67f, nFileSizeHigh=0x0, nFileSizeLow=0x1028, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RHeartbeatConfig.xml", cAlternateFileName="C2RHEA~1.XML")) returned 1 [0116.635] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb3841600, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RUI.en-us.dll", cAlternateFileName="C2RUIE~1.DLL")) returned 1 [0116.636] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x514a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1 [0116.636] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbd783a00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="i640.hash", cAlternateFileName="I640~1.HAS")) returned 1 [0116.636] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbc470d00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="i641033.hash", cAlternateFileName="I64103~1.HAS")) returned 1 [0116.636] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x10ae80, dwReserved0=0x0, dwReserved1=0x0, cFileName="IntegratedOffice.exe", cAlternateFileName="INTEGR~1.EXE")) returned 1 [0116.636] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b8a5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b8a5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xa2e72000, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x578d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MavInject32.exe", cAlternateFileName="MAVINJ~1.EXE")) returned 1 [0116.637] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b8a5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b8a5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8745c00, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0x2ffa60, dwReserved0=0x0, dwReserved1=0x0, cFileName="mso20win32client.dll", cAlternateFileName="MSO20W~1.DLL")) returned 1 [0116.637] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80bb0837, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80bb0837, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xad6b600, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0x475e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="mso30win32client.dll", cAlternateFileName="MSO30W~1.DLL")) returned 1 [0116.637] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80bfccf1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80bfccf1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x307ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mso40uires.dll", cAlternateFileName="MSO40U~1.DLL")) returned 1 [0116.637] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c22f4a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80c22f4a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x10cc9700, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0x8e6060, dwReserved0=0x0, dwReserved1=0x0, cFileName="mso40uiwin32client.dll", cAlternateFileName="MSO40U~2.DLL")) returned 1 [0116.637] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x11fdc400, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0xee60, dwReserved0=0x0, dwReserved1=0x0, cFileName="msointl30.en-us.dll", cAlternateFileName="MSOINT~1.DLL")) returned 1 [0116.637] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c9565a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80c9565a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1909ea00, ftLastWriteTime.dwHighDateTime=0x1d098bf, nFileSizeHigh=0x0, nFileSizeLow=0xa12a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1 [0116.638] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x9b0a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1 [0116.638] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b6c4400, ftLastWriteTime.dwHighDateTime=0x1d098bf, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1 [0116.638] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x5b1068, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeC2RClient.exe", cAlternateFileName="OFFICE~1.EXE")) returned 1 [0116.638] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d07d85, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d07d85, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0xf34d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeC2RCom.dll", cAlternateFileName="OFFICE~1.DLL")) returned 1 [0116.639] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d07d85, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d07d85, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbd0d7e00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x2a5e58, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeClickToRun.exe", cAlternateFileName="OFFICE~2.EXE")) returned 1 [0116.639] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3f141b52, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x12ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeUpdateSchedule.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0116.639] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3fa7ec8f, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x1162, dwReserved0=0x0, dwReserved1=0x0, cFileName="ServiceWatcherSchedule.xml", cAlternateFileName="SERVIC~1.XML")) returned 1 [0116.639] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x101458, dwReserved0=0x0, dwReserved1=0x0, cFileName="StreamServer.dll", cAlternateFileName="STREAM~1.DLL")) returned 1 [0116.639] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0xefec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ucrtbase.dll", cAlternateFileName="")) returned 1 [0116.639] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d7a486, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d7a486, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x5f4b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vccorlib140.dll", cAlternateFileName="VCCORL~1.DLL")) returned 1 [0116.640] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d7a486, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d7a486, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1 [0116.640] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d7a486, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d7a486, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 0 [0116.640] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0116.640] GetProcessHeap () returned 0xae0000 [0116.640] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3440080 | out: hHeap=0xae0000) returned 1 [0116.640] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffbd93, cFileName="ink", cAlternateFileName="")) returned 1 [0116.640] GetProcessHeap () returned 0xae0000 [0116.641] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3440080 [0116.641] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\*", lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9178 [0116.920] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.920] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe462e472, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe462e472, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xc137d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Alphabet.xml", cAlternateFileName="")) returned 1 [0116.921] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05532b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-SA", cAlternateFileName="")) returned 1 [0116.921] GetProcessHeap () returned 0xae0000 [0116.921] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0116.922] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05532b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0116.924] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05532b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.924] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0116.924] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0116.924] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0116.924] GetProcessHeap () returned 0xae0000 [0116.925] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0116.925] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0116.925] GetProcessHeap () returned 0xae0000 [0116.925] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0116.925] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0116.925] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.925] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0116.926] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0116.926] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0116.926] GetProcessHeap () returned 0xae0000 [0116.926] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0116.926] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x69a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content.xml", cAlternateFileName="")) returned 1 [0116.926] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0554b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0116.926] GetProcessHeap () returned 0xae0000 [0116.926] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0116.926] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0554b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0116.927] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0554b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.927] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e316e09, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e316e09, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e316e09, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0116.927] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e316e09, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e316e09, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e316e09, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0116.927] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0116.927] GetProcessHeap () returned 0xae0000 [0116.928] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0116.928] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0116.928] GetProcessHeap () returned 0xae0000 [0116.928] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0116.928] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0116.928] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.929] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2f0ba2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2f0ba2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2f0ba2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0116.929] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2f0ba2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2f0ba2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2f0ba2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0116.929] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0116.929] GetProcessHeap () returned 0xae0000 [0116.929] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0116.929] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0116.929] GetProcessHeap () returned 0xae0000 [0116.929] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0116.930] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0116.931] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.931] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2f0ba2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2f0ba2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2f0ba2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0116.931] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2f0ba2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2f0ba2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2f0ba2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0116.931] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0116.931] GetProcessHeap () returned 0xae0000 [0116.932] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0116.932] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0116.932] GetProcessHeap () returned 0xae0000 [0116.932] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0116.932] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0116.932] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.932] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0116.933] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0116.933] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0116.933] GetProcessHeap () returned 0xae0000 [0116.933] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0116.933] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0557085, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB", cAlternateFileName="")) returned 1 [0116.933] GetProcessHeap () returned 0xae0000 [0116.933] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0116.933] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0557085, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0116.934] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0557085, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.934] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0116.934] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0116.934] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0116.934] GetProcessHeap () returned 0xae0000 [0116.934] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0116.934] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dd09d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0116.935] GetProcessHeap () returned 0xae0000 [0116.935] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0116.935] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dd09d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0116.939] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dd09d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.939] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a3b058, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a3b058, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1b2d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-correct.avi", cAlternateFileName="")) returned 1 [0116.939] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a612b1, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a612b1, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xbf28, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-delete.avi", cAlternateFileName="")) returned 1 [0116.939] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a1d507, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1aad768, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1aad768, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb61e, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-join.avi", cAlternateFileName="")) returned 1 [0116.940] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x148de, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-split.avi", cAlternateFileName="")) returned 1 [0116.940] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2bfcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="correct.avi", cAlternateFileName="")) returned 1 [0116.940] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a612b1, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a612b1, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x32e18, dwReserved0=0x0, dwReserved1=0x0, cFileName="delete.avi", cAlternateFileName="")) returned 1 [0116.940] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da3ec5f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7bf3d600, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickLearningWizard.exe.mui", cAlternateFileName="")) returned 1 [0116.940] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dab1374, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7e563000, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll.mui", cAlternateFileName="")) returned 1 [0116.941] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d9f27a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7f875d00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization.exe.mui", cAlternateFileName="")) returned 1 [0116.941] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d9f27a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7f875d00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPSEventLogMsg.dll.mui", cAlternateFileName="")) returned 1 [0116.941] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da18a06, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x80b88a00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsMigrationPlugin.dll.mui", cAlternateFileName="")) returned 1 [0116.941] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a1d507, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1af9c24, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1af9c24, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x30d3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="join.avi", cAlternateFileName="")) returned 1 [0116.941] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7e563000, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll.mui", cAlternateFileName="")) returned 1 [0116.942] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da8b116, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7d250300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mip.exe.mui", cAlternateFileName="")) returned 1 [0116.942] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da18a06, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x80b88a00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll.mui", cAlternateFileName="")) returned 1 [0116.942] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dab1374, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7e563000, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll.mui", cAlternateFileName="")) returned 1 [0116.942] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da18a06, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7f875d00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.exe.mui", cAlternateFileName="")) returned 1 [0116.942] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2c6cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="split.avi", cAlternateFileName="")) returned 1 [0116.943] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7e563000, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="tabskb.dll.mui", cAlternateFileName="")) returned 1 [0116.943] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da8b116, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7d250300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabTip.exe.mui", cAlternateFileName="")) returned 1 [0116.943] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ffe6194, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7c896e00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x6200, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipRes.dll.mui", cAlternateFileName="")) returned 1 [0116.943] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0116.943] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7d250300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 1 [0116.944] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7d250300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 0 [0116.944] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0116.947] GetProcessHeap () returned 0xae0000 [0116.947] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0116.947] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05ddf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0116.947] GetProcessHeap () returned 0xae0000 [0116.947] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0116.947] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05ddf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0116.949] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05ddf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.949] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0116.949] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0116.949] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0116.949] GetProcessHeap () returned 0xae0000 [0116.949] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0116.949] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-MX", cAlternateFileName="")) returned 1 [0116.950] GetProcessHeap () returned 0xae0000 [0116.950] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0116.950] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0116.950] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.950] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2a46df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2a46df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2a46df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0116.950] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2a46df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2a46df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2a46df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0116.950] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0116.951] GetProcessHeap () returned 0xae0000 [0116.951] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0116.951] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et-EE", cAlternateFileName="")) returned 1 [0116.951] GetProcessHeap () returned 0xae0000 [0116.951] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0116.951] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0116.951] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.952] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0116.952] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0116.952] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0116.952] GetProcessHeap () returned 0xae0000 [0116.952] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0116.952] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0116.952] GetProcessHeap () returned 0xae0000 [0116.952] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0116.952] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91f8 [0116.953] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.953] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0116.953] FindNextFileW (in: hFindFile=0xaf91f8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0116.953] FindClose (in: hFindFile=0xaf91f8 | out: hFindFile=0xaf91f8) returned 1 [0116.953] GetProcessHeap () returned 0xae0000 [0116.953] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0116.953] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8f49e8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd11f8841, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd11f8841, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x186b84, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickAnimation.avi", cAlternateFileName="")) returned 1 [0116.954] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8f49e8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd121ea9a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd121ea9a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xc4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickLearningWizard.exe", cAlternateFileName="")) returned 1 [0116.954] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0635c03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-CA", cAlternateFileName="")) returned 1 [0116.954] GetProcessHeap () returned 0xae0000 [0116.954] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0116.954] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0635c03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0116.955] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0635c03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.956] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e126ecb, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e126ecb, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e126ecb, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0116.956] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e126ecb, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e126ecb, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e126ecb, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0116.956] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0116.956] GetProcessHeap () returned 0xae0000 [0116.956] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0116.956] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0116.956] GetProcessHeap () returned 0xae0000 [0116.956] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0116.957] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0116.957] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.957] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0116.957] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0116.957] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0116.957] GetProcessHeap () returned 0xae0000 [0116.958] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0116.958] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fsdefinitions", cAlternateFileName="FSDEFI~1")) returned 1 [0116.958] GetProcessHeap () returned 0xae0000 [0116.958] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0116.958] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0117.473] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.474] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638633, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxpad", cAlternateFileName="")) returned 1 [0117.474] GetProcessHeap () returned 0xae0000 [0117.474] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34620a0 [0117.474] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\*", lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638633, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3472958 [0117.475] FindNextFileW (in: hFindFile=0x3472958, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638633, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.475] FindNextFileW (in: hFindFile=0x3472958, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxbase.xml", cAlternateFileName="")) returned 1 [0117.476] FindNextFileW (in: hFindFile=0x3472958, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxbase.xml", cAlternateFileName="")) returned 0 [0117.476] FindClose (in: hFindFile=0x3472958 | out: hFindFile=0x3472958) returned 1 [0117.476] GetProcessHeap () returned 0xae0000 [0117.477] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34620a0 | out: hHeap=0xae0000) returned 1 [0117.477] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxpad.xml", cAlternateFileName="")) returned 1 [0117.477] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638c00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="insert", cAlternateFileName="")) returned 1 [0117.477] GetProcessHeap () returned 0xae0000 [0117.477] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34620a0 [0117.477] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\*", lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638c00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3472c58 [0117.479] FindNextFileW (in: hFindFile=0x3472c58, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638c00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.479] FindNextFileW (in: hFindFile=0x3472c58, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x387, dwReserved0=0x0, dwReserved1=0x0, cFileName="insertbase.xml", cAlternateFileName="")) returned 1 [0117.479] FindNextFileW (in: hFindFile=0x3472c58, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x387, dwReserved0=0x0, dwReserved1=0x0, cFileName="insertbase.xml", cAlternateFileName="")) returned 0 [0117.479] FindClose (in: hFindFile=0x3472c58 | out: hFindFile=0x3472c58) returned 1 [0117.479] GetProcessHeap () returned 0xae0000 [0117.479] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34620a0 | out: hHeap=0xae0000) returned 1 [0117.479] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="insert.xml", cAlternateFileName="")) returned 1 [0117.480] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa063932e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypad", cAlternateFileName="")) returned 1 [0117.480] GetProcessHeap () returned 0xae0000 [0117.480] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34620a0 [0117.480] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\*", lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa063932e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3472bd8 [0117.480] FindNextFileW (in: hFindFile=0x3472bd8, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa063932e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.481] FindNextFileW (in: hFindFile=0x3472bd8, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0x0, dwReserved1=0x0, cFileName="ea.xml", cAlternateFileName="")) returned 1 [0117.481] FindNextFileW (in: hFindFile=0x3472bd8, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x387, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypadbase.xml", cAlternateFileName="")) returned 1 [0117.481] FindNextFileW (in: hFindFile=0x3472bd8, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor-kor.xml", cAlternateFileName="")) returned 1 [0117.481] FindNextFileW (in: hFindFile=0x3472bd8, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor-kor.xml", cAlternateFileName="")) returned 0 [0117.481] FindClose (in: hFindFile=0x3472bd8 | out: hFindFile=0x3472bd8) returned 1 [0117.481] GetProcessHeap () returned 0xae0000 [0117.481] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34620a0 | out: hHeap=0xae0000) returned 1 [0117.482] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypad.xml", cAlternateFileName="")) returned 1 [0117.482] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cd023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="main", cAlternateFileName="")) returned 1 [0117.482] GetProcessHeap () returned 0xae0000 [0117.482] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34620a0 [0117.482] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\*", lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cd023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3472298 [0117.487] FindNextFileW (in: hFindFile=0x3472298, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cd023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.487] FindNextFileW (in: hFindFile=0x3472298, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd05, dwReserved0=0x0, dwReserved1=0x0, cFileName="base.xml", cAlternateFileName="")) returned 1 [0117.488] FindNextFileW (in: hFindFile=0x3472298, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="baseAltGr_rtl.xml", cAlternateFileName="")) returned 1 [0117.488] FindNextFileW (in: hFindFile=0x3472298, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_altgr.xml", cAlternateFileName="")) returned 1 [0117.488] FindNextFileW (in: hFindFile=0x3472298, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_ca.xml", cAlternateFileName="")) returned 1 [0117.488] FindNextFileW (in: hFindFile=0x3472298, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_heb.xml", cAlternateFileName="")) returned 1 [0117.489] FindNextFileW (in: hFindFile=0x3472298, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_jpn.xml", cAlternateFileName="")) returned 1 [0117.489] FindNextFileW (in: hFindFile=0x3472298, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_kor.xml", cAlternateFileName="")) returned 1 [0117.489] FindNextFileW (in: hFindFile=0x3472298, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_rtl.xml", cAlternateFileName="")) returned 1 [0117.489] FindNextFileW (in: hFindFile=0x3472298, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x40e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp.xml", cAlternateFileName="")) returned 1 [0117.489] FindNextFileW (in: hFindFile=0x3472298, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3af9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr.xml", cAlternateFileName="")) returned 1 [0117.490] FindNextFileW (in: hFindFile=0x3472298, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x264b, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-changjei.xml", cAlternateFileName="")) returned 1 [0117.490] FindNextFileW (in: hFindFile=0x3472298, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-dayi.xml", cAlternateFileName="")) returned 1 [0117.490] FindNextFileW (in: hFindFile=0x3472298, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 1 [0117.490] FindNextFileW (in: hFindFile=0x3472298, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 0 [0117.490] FindClose (in: hFindFile=0x3472298 | out: hFindFile=0x3472298) returned 1 [0117.498] GetProcessHeap () returned 0xae0000 [0117.498] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34620a0 | out: hHeap=0xae0000) returned 1 [0117.498] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xadda, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.xml", cAlternateFileName="")) returned 1 [0117.498] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cdb88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskclearui", cAlternateFileName="OSKCLE~1")) returned 1 [0117.498] GetProcessHeap () returned 0xae0000 [0117.498] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34620a0 [0117.498] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\*", lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cdb88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3472c58 [0117.499] FindNextFileW (in: hFindFile=0x3472c58, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cdb88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.499] FindNextFileW (in: hFindFile=0x3472c58, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskclearuibase.xml", cAlternateFileName="")) returned 1 [0117.499] FindNextFileW (in: hFindFile=0x3472c58, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskclearuibase.xml", cAlternateFileName="")) returned 0 [0117.499] FindClose (in: hFindFile=0x3472c58 | out: hFindFile=0x3472c58) returned 1 [0117.499] GetProcessHeap () returned 0xae0000 [0117.499] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34620a0 | out: hHeap=0xae0000) returned 1 [0117.500] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskclearui.xml", cAlternateFileName="")) returned 1 [0117.500] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenu", cAlternateFileName="")) returned 1 [0117.500] GetProcessHeap () returned 0xae0000 [0117.500] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34620a0 [0117.500] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\*", lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34729d8 [0117.502] FindNextFileW (in: hFindFile=0x34729d8, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.502] FindNextFileW (in: hFindFile=0x34729d8, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 1 [0117.502] FindNextFileW (in: hFindFile=0x34729d8, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 0 [0117.502] FindClose (in: hFindFile=0x34729d8 | out: hFindFile=0x34729d8) returned 1 [0117.502] GetProcessHeap () returned 0xae0000 [0117.503] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34620a0 | out: hHeap=0xae0000) returned 1 [0117.503] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenu.xml", cAlternateFileName="")) returned 1 [0117.503] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce7a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknav", cAlternateFileName="")) returned 1 [0117.503] GetProcessHeap () returned 0xae0000 [0117.503] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34620a0 [0117.503] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\*", lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce7a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34729d8 [0117.503] FindNextFileW (in: hFindFile=0x34729d8, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce7a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.504] FindNextFileW (in: hFindFile=0x34729d8, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknavbase.xml", cAlternateFileName="")) returned 1 [0117.504] FindNextFileW (in: hFindFile=0x34729d8, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknavbase.xml", cAlternateFileName="")) returned 0 [0117.504] FindClose (in: hFindFile=0x34729d8 | out: hFindFile=0x34729d8) returned 1 [0117.504] GetProcessHeap () returned 0xae0000 [0117.504] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34620a0 | out: hHeap=0xae0000) returned 1 [0117.504] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknav.xml", cAlternateFileName="")) returned 1 [0117.504] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ceb7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpad", cAlternateFileName="OSKNUM~1")) returned 1 [0117.505] GetProcessHeap () returned 0xae0000 [0117.505] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34620a0 [0117.505] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\*", lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ceb7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3472458 [0117.505] FindNextFileW (in: hFindFile=0x3472458, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ceb7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.505] FindNextFileW (in: hFindFile=0x3472458, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x73d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 1 [0117.505] FindNextFileW (in: hFindFile=0x3472458, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x73d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 0 [0117.505] FindClose (in: hFindFile=0x3472458 | out: hFindFile=0x3472458) returned 1 [0117.506] GetProcessHeap () returned 0xae0000 [0117.506] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34620a0 | out: hHeap=0xae0000) returned 1 [0117.506] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpad.xml", cAlternateFileName="")) returned 1 [0117.506] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cef41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpred", cAlternateFileName="")) returned 1 [0117.506] GetProcessHeap () returned 0xae0000 [0117.506] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34620a0 [0117.506] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\*", lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cef41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34729d8 [0117.650] FindNextFileW (in: hFindFile=0x34729d8, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cef41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.650] FindNextFileW (in: hFindFile=0x34729d8, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 1 [0117.651] FindNextFileW (in: hFindFile=0x34729d8, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 0 [0117.651] FindClose (in: hFindFile=0x34729d8 | out: hFindFile=0x34729d8) returned 1 [0117.651] GetProcessHeap () returned 0xae0000 [0117.651] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34620a0 | out: hHeap=0xae0000) returned 1 [0117.651] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpred.xml", cAlternateFileName="")) returned 1 [0117.651] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf371, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols", cAlternateFileName="")) returned 1 [0117.651] GetProcessHeap () returned 0xae0000 [0117.652] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34620a0 [0117.652] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\*", lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf371, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34720d8 [0117.653] FindNextFileW (in: hFindFile=0x34720d8, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf371, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.654] FindNextFileW (in: hFindFile=0x34720d8, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ea-sym.xml", cAlternateFileName="")) returned 1 [0117.654] FindNextFileW (in: hFindFile=0x34720d8, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x325, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp-sym.xml", cAlternateFileName="")) returned 1 [0117.654] FindNextFileW (in: hFindFile=0x34720d8, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeef, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbase.xml", cAlternateFileName="")) returned 1 [0117.654] FindNextFileW (in: hFindFile=0x34720d8, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeef, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbase.xml", cAlternateFileName="")) returned 0 [0117.654] FindClose (in: hFindFile=0x34720d8 | out: hFindFile=0x34720d8) returned 1 [0117.654] GetProcessHeap () returned 0xae0000 [0117.655] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34620a0 | out: hHeap=0xae0000) returned 1 [0117.655] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols.xml", cAlternateFileName="")) returned 1 [0117.655] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols.xml", cAlternateFileName="")) returned 0 [0117.655] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0117.655] GetProcessHeap () returned 0xae0000 [0117.655] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0117.657] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-IL", cAlternateFileName="")) returned 1 [0117.657] GetProcessHeap () returned 0xae0000 [0117.657] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0117.658] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0117.658] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.659] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0117.659] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0117.659] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0117.660] GetProcessHeap () returned 0xae0000 [0117.660] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0117.660] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-HR", cAlternateFileName="")) returned 1 [0117.660] GetProcessHeap () returned 0xae0000 [0117.660] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0117.660] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0117.661] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.661] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0117.661] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0117.661] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0117.661] GetProcessHeap () returned 0xae0000 [0117.661] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0117.661] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0117.661] GetProcessHeap () returned 0xae0000 [0117.661] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0117.662] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0117.662] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.662] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0117.662] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0117.662] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0117.663] GetProcessHeap () returned 0xae0000 [0117.663] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0118.264] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe382bd1f, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe382bd1f, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb620, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrcommonlm.dat", cAlternateFileName="")) returned 1 [0118.264] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HWRCustomization", cAlternateFileName="HWRCUS~1")) returned 1 [0118.265] GetProcessHeap () returned 0xae0000 [0118.265] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0118.265] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\HWRCustomization\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0118.266] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.267] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0118.267] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0118.267] GetProcessHeap () returned 0xae0000 [0118.267] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0118.267] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85c57278, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb269cdea, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb269cdea, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x79bc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrenclm.dat", cAlternateFileName="")) returned 1 [0118.268] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe38781cd, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe38781cd, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x10cb30, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrlatinlm.dat", cAlternateFileName="")) returned 1 [0118.268] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85cc99ae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb28b2edf, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb28b2edf, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2662f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrusalm.dat", cAlternateFileName="")) returned 1 [0118.268] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85cc99ae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb281a570, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb281a570, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x339380, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrusash.dat", cAlternateFileName="")) returned 1 [0118.268] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x58400, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkDiv.dll", cAlternateFileName="")) returned 1 [0118.268] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1ecc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll", cAlternateFileName="")) returned 1 [0118.269] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe467a929, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe467a929, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x59a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization.exe", cAlternateFileName="")) returned 1 [0118.269] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x972, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsar.xml", cAlternateFileName="")) returned 1 [0118.269] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa20, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscat.xml", cAlternateFileName="")) returned 1 [0118.269] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x99e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipschs.xml", cAlternateFileName="")) returned 1 [0118.269] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscht.xml", cAlternateFileName="")) returned 1 [0118.270] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscsy.xml", cAlternateFileName="")) returned 1 [0118.270] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsdan.xml", cAlternateFileName="")) returned 1 [0118.270] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsdeu.xml", cAlternateFileName="")) returned 1 [0118.270] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsel.xml", cAlternateFileName="")) returned 1 [0118.271] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsen.xml", cAlternateFileName="")) returned 1 [0118.271] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xbd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsesp.xml", cAlternateFileName="")) returned 1 [0118.271] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d14d081, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d14d081, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPSEventLogMsg.dll", cAlternateFileName="")) returned 1 [0118.271] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa62, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsfin.xml", cAlternateFileName="")) returned 1 [0118.271] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa44, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsfra.xml", cAlternateFileName="")) returned 1 [0118.272] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipshe.xml", cAlternateFileName="")) returned 1 [0118.272] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipshi.xml", cAlternateFileName="")) returned 1 [0118.272] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c96711d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipshrv.xml", cAlternateFileName="")) returned 1 [0118.273] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d14d081, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d14d081, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsid.xml", cAlternateFileName="")) returned 1 [0118.273] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9de, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsita.xml", cAlternateFileName="")) returned 1 [0118.273] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c96711d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c96711d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c96711d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9da, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsjpn.xml", cAlternateFileName="")) returned 1 [0118.274] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipskor.xml", cAlternateFileName="")) returned 1 [0118.274] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe462e472, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe462e472, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsMigrationPlugin.dll", cAlternateFileName="")) returned 1 [0118.274] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsnld.xml", cAlternateFileName="")) returned 1 [0118.274] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa14, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsnor.xml", cAlternateFileName="")) returned 1 [0118.274] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa28, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsplk.xml", cAlternateFileName="")) returned 1 [0118.274] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1ec00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsPlugin.dll", cAlternateFileName="")) returned 1 [0118.275] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsptb.xml", cAlternateFileName="")) returned 1 [0118.275] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsptg.xml", cAlternateFileName="")) returned 1 [0118.275] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c96711d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c96711d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c96711d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsrom.xml", cAlternateFileName="")) returned 1 [0118.275] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsrus.xml", cAlternateFileName="")) returned 1 [0118.275] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssrb.xml", cAlternateFileName="")) returned 1 [0118.276] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssrl.xml", cAlternateFileName="")) returned 1 [0118.276] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssve.xml", cAlternateFileName="")) returned 1 [0118.276] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xaa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipstr.xml", cAlternateFileName="")) returned 1 [0118.276] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0769b1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0118.276] GetProcessHeap () returned 0xae0000 [0118.276] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0118.277] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0769b1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0118.279] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0769b1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.279] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0118.279] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0118.279] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0118.280] GetProcessHeap () returned 0xae0000 [0118.280] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0118.280] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0118.280] GetProcessHeap () returned 0xae0000 [0118.280] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0118.280] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0118.280] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.280] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0118.281] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0118.281] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0118.281] GetProcessHeap () returned 0xae0000 [0118.281] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0118.281] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0118.281] GetProcessHeap () returned 0xae0000 [0118.281] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0118.281] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0118.282] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.282] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0118.282] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0118.283] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0118.283] GetProcessHeap () returned 0xae0000 [0118.283] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0118.283] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LanguageModel", cAlternateFileName="LANGUA~1")) returned 1 [0118.283] GetProcessHeap () returned 0xae0000 [0118.283] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0118.283] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0118.285] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.285] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="chstic.dgml", cAlternateFileName="")) returned 1 [0118.285] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="chstic.dgml", cAlternateFileName="")) returned 0 [0118.285] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0118.285] GetProcessHeap () returned 0xae0000 [0118.285] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0118.285] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt-LT", cAlternateFileName="")) returned 1 [0118.286] GetProcessHeap () returned 0xae0000 [0118.286] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0118.286] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0118.286] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.286] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0118.287] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0118.287] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0118.287] GetProcessHeap () returned 0xae0000 [0118.287] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0118.287] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv-LV", cAlternateFileName="")) returned 1 [0118.287] GetProcessHeap () returned 0xae0000 [0118.287] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0118.287] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0118.288] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.288] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0118.289] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0118.289] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0118.289] GetProcessHeap () returned 0xae0000 [0118.289] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0118.289] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a4376e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1f30e81, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1f30e81, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x19f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll", cAlternateFileName="")) returned 1 [0118.289] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463d4edd, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xc2004e62, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463d4edd, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x7b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Ink.dll", cAlternateFileName="")) returned 1 [0118.289] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a4376e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd51e08b5, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd51e08b5, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x178200, dwReserved0=0x0, dwReserved1=0x0, cFileName="mip.exe", cAlternateFileName="")) returned 1 [0118.290] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a1d507, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xde1acd8d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xde1acd8d, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x612e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mraut.dll", cAlternateFileName="")) returned 1 [0118.290] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwgst.dll", cAlternateFileName="")) returned 1 [0118.290] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe3805ad4, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe3805ad4, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x106a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll", cAlternateFileName="")) returned 1 [0118.290] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0118.290] GetProcessHeap () returned 0xae0000 [0118.290] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0118.290] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0118.291] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.291] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e90ce26, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e90ce26, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e90ce26, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0118.291] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e90ce26, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e90ce26, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e90ce26, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0118.292] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0118.292] GetProcessHeap () returned 0xae0000 [0118.292] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0118.292] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0118.292] GetProcessHeap () returned 0xae0000 [0118.292] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0118.292] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0118.293] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.294] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0118.294] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0118.294] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0118.294] GetProcessHeap () returned 0xae0000 [0118.294] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0118.294] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0118.294] GetProcessHeap () returned 0xae0000 [0118.294] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0118.295] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0118.295] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.295] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0118.296] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0118.296] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0118.296] GetProcessHeap () returned 0xae0000 [0118.296] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0118.296] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0118.296] GetProcessHeap () returned 0xae0000 [0118.296] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0118.296] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0118.297] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.297] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0118.297] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0118.297] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0118.297] GetProcessHeap () returned 0xae0000 [0118.297] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0118.297] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0118.298] GetProcessHeap () returned 0xae0000 [0118.298] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0118.298] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0118.298] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.298] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0118.299] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0118.299] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0118.299] GetProcessHeap () returned 0xae0000 [0118.299] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0118.299] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-RO", cAlternateFileName="")) returned 1 [0118.299] GetProcessHeap () returned 0xae0000 [0118.299] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0118.299] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0118.301] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.301] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0118.301] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0118.301] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0118.301] GetProcessHeap () returned 0xae0000 [0118.301] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0118.301] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll", cAlternateFileName="")) returned 1 [0118.302] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0118.302] GetProcessHeap () returned 0xae0000 [0118.302] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0118.302] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0118.303] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.303] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0118.303] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0118.303] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0118.631] GetProcessHeap () returned 0xae0000 [0118.631] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0118.632] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.exe", cAlternateFileName="")) returned 1 [0118.633] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-SK", cAlternateFileName="")) returned 1 [0118.633] GetProcessHeap () returned 0xae0000 [0118.633] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0118.633] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0118.637] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.637] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0118.638] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0118.638] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0118.639] GetProcessHeap () returned 0xae0000 [0118.639] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0118.639] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-SI", cAlternateFileName="")) returned 1 [0118.639] GetProcessHeap () returned 0xae0000 [0118.639] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0118.639] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0118.639] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.639] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0118.640] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0118.640] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0118.640] GetProcessHeap () returned 0xae0000 [0118.640] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0118.640] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~1")) returned 1 [0118.640] GetProcessHeap () returned 0xae0000 [0118.640] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0118.640] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0118.643] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.643] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0118.643] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0118.644] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0118.644] GetProcessHeap () returned 0xae0000 [0118.644] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0118.644] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0118.644] GetProcessHeap () returned 0xae0000 [0118.644] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0118.644] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0118.645] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.645] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0118.645] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0118.645] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0118.645] GetProcessHeap () returned 0xae0000 [0118.645] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0118.645] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe467a929, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe467a929, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabIpsps.dll", cAlternateFileName="")) returned 1 [0118.646] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463d4edd, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x779da8e5, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463d4edd, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x3e9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tabskb.dll", cAlternateFileName="")) returned 1 [0118.646] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x5f780, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabTip.exe", cAlternateFileName="")) returned 1 [0118.646] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th-TH", cAlternateFileName="")) returned 1 [0118.646] GetProcessHeap () returned 0xae0000 [0118.646] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0118.646] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0118.648] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.648] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0118.648] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0118.649] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0118.659] GetProcessHeap () returned 0xae0000 [0118.659] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0118.659] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1aad768, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1aad768, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x109400, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipRes.dll", cAlternateFileName="")) returned 1 [0118.659] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll", cAlternateFileName="")) returned 1 [0118.660] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79680792, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x79680792, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x79680792, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x101200, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipskins.dll", cAlternateFileName="")) returned 1 [0118.660] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7965a52d, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x7965a52d, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x7965a52d, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x9e1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tiptsf.dll", cAlternateFileName="")) returned 1 [0118.660] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463d4edd, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x6ebfe576, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463d4edd, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x17a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tpcps.dll", cAlternateFileName="")) returned 1 [0118.660] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0118.660] GetProcessHeap () returned 0xae0000 [0118.660] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0118.660] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0118.661] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.661] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0118.661] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0118.661] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0118.661] GetProcessHeap () returned 0xae0000 [0118.662] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0118.662] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-UA", cAlternateFileName="")) returned 1 [0118.662] GetProcessHeap () returned 0xae0000 [0118.662] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0118.662] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0118.668] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.669] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0118.669] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0118.669] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0118.669] GetProcessHeap () returned 0xae0000 [0118.669] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0118.669] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0118.669] GetProcessHeap () returned 0xae0000 [0118.669] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0118.669] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0118.670] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.670] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0118.670] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0118.670] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0118.670] GetProcessHeap () returned 0xae0000 [0118.670] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0118.671] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0118.671] GetProcessHeap () returned 0xae0000 [0118.671] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0118.671] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0118.671] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.671] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e0daa01, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e0daa01, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0118.672] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e0daa01, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e0daa01, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0118.672] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0118.672] GetProcessHeap () returned 0xae0000 [0118.672] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0118.672] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0118.672] FindClose (in: hFindFile=0xaf9178 | out: hFindFile=0xaf9178) returned 1 [0118.672] GetProcessHeap () returned 0xae0000 [0118.672] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3440080 | out: hHeap=0xae0000) returned 1 [0118.675] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffbd93, cFileName="MSInfo", cAlternateFileName="")) returned 1 [0118.675] GetProcessHeap () returned 0xae0000 [0118.675] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34730b0 [0118.676] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\*", lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9178 [0118.676] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.677] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0118.677] GetProcessHeap () returned 0xae0000 [0118.677] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3440080 [0118.678] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0119.196] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.197] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x73430dfb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x261f2e00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 1 [0119.197] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x73430dfb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x261f2e00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 0 [0119.197] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0119.197] GetProcessHeap () returned 0xae0000 [0119.197] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3440080 | out: hHeap=0xae0000) returned 1 [0119.198] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463aec8d, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x63793f1, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463aec8d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x5a600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 1 [0119.198] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463aec8d, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x63793f1, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463aec8d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x5a600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 0 [0119.198] FindClose (in: hFindFile=0xaf9178 | out: hFindFile=0xaf9178) returned 1 [0119.199] GetProcessHeap () returned 0xae0000 [0119.199] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34730b0 | out: hHeap=0xae0000) returned 1 [0119.202] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9f60362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffbd93, cFileName="OFFICE16", cAlternateFileName="")) returned 1 [0119.202] GetProcessHeap () returned 0xae0000 [0119.202] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34730b0 [0119.203] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\*", lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9f60362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9178 [0119.203] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9f60362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.203] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9e7b530, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x58cd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICLUA.EXE", cAlternateFileName="")) returned 1 [0119.204] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Setup Controller", cAlternateFileName="OFFICE~1")) returned 1 [0119.204] GetProcessHeap () returned 0xae0000 [0119.204] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3440080 [0119.206] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffabe0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0119.208] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffabe0, cFileName="..", cAlternateFileName="")) returned 1 [0119.208] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e1fe00, ftCreationTime.dwHighDateTime=0x1d0d79d, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x69e1fe00, ftLastWriteTime.dwHighDateTime=0x1d0d79d, nFileSizeHigh=0x0, nFileSizeLow=0x168258, dwReserved0=0x0, dwReserved1=0xffffabe0, cFileName="pidgenx.dll", cAlternateFileName="")) returned 1 [0119.209] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e1fe00, ftCreationTime.dwHighDateTime=0x1d0d79d, ftLastAccessTime.dwLowDateTime=0xda982389, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x69e1fe00, ftLastWriteTime.dwHighDateTime=0x1d0d79d, nFileSizeHigh=0x0, nFileSizeLow=0x902bb, dwReserved0=0x0, dwReserved1=0xffffabe0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0119.209] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0xffffabe0, cFileName="pkeyconfig.companion.dll", cAlternateFileName="PKEYCO~1.DLL")) returned 1 [0119.209] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0xffffabe0, cFileName="pkeyconfig.companion.dll", cAlternateFileName="PKEYCO~1.DLL")) returned 0 [0119.209] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0119.212] GetProcessHeap () returned 0xae0000 [0119.212] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3440080 | out: hHeap=0xae0000) returned 1 [0119.212] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Setup Controller", cAlternateFileName="OFFICE~1")) returned 0 [0119.212] FindClose (in: hFindFile=0xaf9178 | out: hFindFile=0xaf9178) returned 1 [0119.212] GetProcessHeap () returned 0xae0000 [0119.212] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34730b0 | out: hHeap=0xae0000) returned 1 [0119.215] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffbd93, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1 [0119.215] GetProcessHeap () returned 0xae0000 [0119.215] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34730b0 [0119.216] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9178 [0119.216] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.217] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0119.217] FindClose (in: hFindFile=0xaf9178 | out: hFindFile=0xaf9178) returned 1 [0119.217] GetProcessHeap () returned 0xae0000 [0119.217] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34730b0 | out: hHeap=0xae0000) returned 1 [0119.217] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffbd93, cFileName="Source Engine", cAlternateFileName="SOURCE~1")) returned 1 [0119.217] GetProcessHeap () returned 0xae0000 [0119.217] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34730b0 [0119.217] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\*", lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9178 [0119.218] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.218] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3ba48, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSE.EXE", cAlternateFileName="")) returned 1 [0119.218] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3ba48, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSE.EXE", cAlternateFileName="")) returned 0 [0119.218] FindClose (in: hFindFile=0xaf9178 | out: hFindFile=0xaf9178) returned 1 [0119.218] GetProcessHeap () returned 0xae0000 [0119.218] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34730b0 | out: hHeap=0xae0000) returned 1 [0119.218] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffbd93, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0119.219] GetProcessHeap () returned 0xae0000 [0119.219] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34730b0 [0119.219] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\*", lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9178 [0119.219] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.219] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.htm", cAlternateFileName="")) returned 1 [0119.219] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.jpg", cAlternateFileName="")) returned 1 [0119.220] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a3ecc0a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d2da05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d2da05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0119.220] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.htm", cAlternateFileName="")) returned 1 [0119.220] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.jpg", cAlternateFileName="")) returned 1 [0119.220] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Green Bubbles.htm", cAlternateFileName="")) returned 1 [0119.220] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1906, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenBubbles.jpg", cAlternateFileName="")) returned 1 [0119.220] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hand Prints.htm", cAlternateFileName="")) returned 1 [0119.221] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HandPrints.jpg", cAlternateFileName="")) returned 1 [0119.221] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Orange Circles.htm", cAlternateFileName="")) returned 1 [0119.221] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x18ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrangeCircles.jpg", cAlternateFileName="")) returned 1 [0119.221] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.htm", cAlternateFileName="")) returned 1 [0119.221] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.jpg", cAlternateFileName="")) returned 1 [0119.222] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96dccc65, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.htm", cAlternateFileName="")) returned 1 [0119.222] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96dccc65, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96dccc65, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96dccc65, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.jpg", cAlternateFileName="")) returned 1 [0119.222] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shades of Blue.htm", cAlternateFileName="")) returned 1 [0119.222] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShadesOfBlue.jpg", cAlternateFileName="")) returned 1 [0119.222] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Soft Blue.htm", cAlternateFileName="")) returned 1 [0119.223] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2949, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.jpg", cAlternateFileName="")) returned 1 [0119.223] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.htm", cAlternateFileName="")) returned 1 [0119.223] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 1 [0119.223] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 0 [0119.223] FindClose (in: hFindFile=0xaf9178 | out: hFindFile=0xaf9178) returned 1 [0119.224] GetProcessHeap () returned 0xae0000 [0119.224] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34730b0 | out: hHeap=0xae0000) returned 1 [0119.224] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffbd93, cFileName="TextConv", cAlternateFileName="")) returned 1 [0119.224] GetProcessHeap () returned 0xae0000 [0119.224] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34730b0 [0119.224] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\*", lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9178 [0119.224] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.224] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0119.225] GetProcessHeap () returned 0xae0000 [0119.225] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3440080 [0119.599] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\en-US\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffabe0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0119.600] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffabe0, cFileName="..", cAlternateFileName="")) returned 1 [0119.600] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffabe0, cFileName="..", cAlternateFileName="")) returned 0 [0119.600] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0119.601] GetProcessHeap () returned 0xae0000 [0119.601] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3440080 | out: hHeap=0xae0000) returned 1 [0119.601] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0119.601] FindClose (in: hFindFile=0xaf9178 | out: hFindFile=0xaf9178) returned 1 [0119.601] GetProcessHeap () returned 0xae0000 [0119.601] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34730b0 | out: hHeap=0xae0000) returned 1 [0119.604] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffbd93, cFileName="Triedit", cAlternateFileName="")) returned 1 [0119.604] GetProcessHeap () returned 0xae0000 [0119.604] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34730b0 [0119.605] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\*", lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9178 [0119.607] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.607] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0119.607] GetProcessHeap () returned 0xae0000 [0119.607] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3440080 [0119.609] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\en-US\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffabe0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0119.609] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffabe0, cFileName="..", cAlternateFileName="")) returned 1 [0119.610] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffabe0, cFileName="..", cAlternateFileName="")) returned 0 [0119.610] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0119.610] GetProcessHeap () returned 0xae0000 [0119.610] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3440080 | out: hHeap=0xae0000) returned 1 [0119.610] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0119.610] FindClose (in: hFindFile=0xaf9178 | out: hFindFile=0xaf9178) returned 1 [0119.610] GetProcessHeap () returned 0xae0000 [0119.610] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34730b0 | out: hHeap=0xae0000) returned 1 [0119.614] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffbd93, cFileName="VC", cAlternateFileName="")) returned 1 [0119.614] GetProcessHeap () returned 0xae0000 [0119.614] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34730b0 [0119.615] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\*", lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9178 [0119.616] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.616] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8127e00, ftCreationTime.dwHighDateTime=0x1cbd076, ftLastAccessTime.dwLowDateTime=0xcd0a4098, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd8127e00, ftLastWriteTime.dwHighDateTime=0x1cbd076, nFileSizeHigh=0x0, nFileSizeLow=0xf1b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia100.dll", cAlternateFileName="")) returned 1 [0119.617] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfe87c00, ftCreationTime.dwHighDateTime=0x1cbfe36, ftLastAccessTime.dwLowDateTime=0x2ce22546, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xcfe87c00, ftLastWriteTime.dwHighDateTime=0x1cbfe36, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 1 [0119.617] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfe87c00, ftCreationTime.dwHighDateTime=0x1cbfe36, ftLastAccessTime.dwLowDateTime=0x2ce22546, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xcfe87c00, ftLastWriteTime.dwHighDateTime=0x1cbfe36, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 0 [0119.617] FindClose (in: hFindFile=0xaf9178 | out: hFindFile=0xaf9178) returned 1 [0119.617] GetProcessHeap () returned 0xae0000 [0119.617] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34730b0 | out: hHeap=0xae0000) returned 1 [0119.617] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffbd93, cFileName="VGX", cAlternateFileName="")) returned 1 [0119.617] GetProcessHeap () returned 0xae0000 [0119.617] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34730b0 [0119.618] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VGX\\*", lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9178 [0119.618] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.618] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a69a2a7, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xb3fd6e56, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x4a69a2a7, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xf1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 1 [0119.618] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a69a2a7, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xb3fd6e56, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x4a69a2a7, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xf1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 0 [0119.618] FindClose (in: hFindFile=0xaf9178 | out: hFindFile=0xaf9178) returned 1 [0119.619] GetProcessHeap () returned 0xae0000 [0119.619] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34730b0 | out: hHeap=0xae0000) returned 1 [0119.619] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffbd93, cFileName="VSTO", cAlternateFileName="")) returned 1 [0119.619] GetProcessHeap () returned 0xae0000 [0119.619] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34730b0 [0119.619] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\*", lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9178 [0119.620] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.620] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0119.620] GetProcessHeap () returned 0xae0000 [0119.620] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3440080 [0119.622] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffabe0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0119.628] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffabe0, cFileName="..", cAlternateFileName="")) returned 1 [0119.629] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffabe0, cFileName="1033", cAlternateFileName="")) returned 1 [0119.629] GetProcessHeap () returned 0xae0000 [0119.629] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0119.629] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\*", lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc9e0, cFileName=".", cAlternateFileName="")) returned 0x3485278 [0119.636] FindNextFileW (in: hFindFile=0x3485278, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffc9e0, cFileName="..", cAlternateFileName="")) returned 1 [0119.636] FindNextFileW (in: hFindFile=0x3485278, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6d7a0a, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x30a0, dwReserved0=0x0, dwReserved1=0xffffc9e0, cFileName="VSTOInstallerUI.dll", cAlternateFileName="VSTOIN~1.DLL")) returned 1 [0119.637] FindNextFileW (in: hFindFile=0x3485278, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x5080, dwReserved0=0x0, dwReserved1=0xffffc9e0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1 [0119.637] FindNextFileW (in: hFindFile=0x3485278, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x5080, dwReserved0=0x0, dwReserved1=0xffffc9e0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 0 [0119.637] FindClose (in: hFindFile=0x3485278 | out: hFindFile=0x3485278) returned 1 [0119.638] GetProcessHeap () returned 0xae0000 [0119.638] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0119.638] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x18888, dwReserved0=0x0, dwReserved1=0xffffabe0, cFileName="VSTOInstaller.exe", cAlternateFileName="VSTOIN~1.EXE")) returned 1 [0119.638] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x59a70, dwReserved0=0x0, dwReserved1=0xffffabe0, cFileName="VSTOLoader.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1 [0119.638] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xbee8, dwReserved0=0x0, dwReserved1=0xffffabe0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 1 [0119.638] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xbee8, dwReserved0=0x0, dwReserved1=0xffffabe0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 0 [0119.638] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0119.639] GetProcessHeap () returned 0xae0000 [0119.639] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3440080 | out: hHeap=0xae0000) returned 1 [0119.641] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x29080, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee.dll", cAlternateFileName="")) returned 1 [0119.641] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x4298, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee100.tlb", cAlternateFileName="VSTOEE~1.TLB")) returned 1 [0119.641] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x5898, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 1 [0119.641] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x5898, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 0 [0119.642] FindClose (in: hFindFile=0xaf9178 | out: hFindFile=0xaf9178) returned 1 [0119.642] GetProcessHeap () returned 0xae0000 [0119.642] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34730b0 | out: hHeap=0xae0000) returned 1 [0119.816] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffbd93, cFileName="VSTO", cAlternateFileName="")) returned 0 [0119.817] FindClose (in: hFindFile=0xaf9138 | out: hFindFile=0xaf9138) returned 1 [0119.817] GetProcessHeap () returned 0xae0000 [0119.817] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3400060 | out: hHeap=0xae0000) returned 1 [0119.819] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0119.819] GetProcessHeap () returned 0xae0000 [0119.819] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3400060 [0119.820] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Services\\*", lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffbd93, cFileName=".", cAlternateFileName="")) returned 0xaf9138 [0119.822] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffbd93, cFileName="..", cAlternateFileName="")) returned 1 [0119.822] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0xffffbd93, cFileName="verisign.bmp", cAlternateFileName="")) returned 1 [0119.822] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0xffffbd93, cFileName="verisign.bmp", cAlternateFileName="")) returned 0 [0119.822] FindClose (in: hFindFile=0xaf9138 | out: hFindFile=0xaf9138) returned 1 [0119.822] GetProcessHeap () returned 0xae0000 [0119.822] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3400060 | out: hHeap=0xae0000) returned 1 [0119.823] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1 [0119.823] GetProcessHeap () returned 0xae0000 [0119.823] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3400060 [0119.823] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\*", lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffbd93, cFileName=".", cAlternateFileName="")) returned 0xaf9138 [0119.829] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffbd93, cFileName="..", cAlternateFileName="")) returned 1 [0119.829] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffbd93, cFileName="ado", cAlternateFileName="")) returned 1 [0119.830] GetProcessHeap () returned 0xae0000 [0119.830] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34730b0 [0119.831] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\*", lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9178 [0119.836] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.836] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52a0c6a1, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x52a0c6a1, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x52a0c6a1, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3a08, dwReserved0=0x0, dwReserved1=0x0, cFileName="adojavas.inc", cAlternateFileName="")) returned 1 [0119.836] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529e643a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x529e643a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x529e643a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3b5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="adovbs.inc", cAlternateFileName="")) returned 1 [0119.836] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0119.836] GetProcessHeap () returned 0xae0000 [0119.837] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3440080 [0119.838] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\en-US\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0119.839] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.839] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9483e2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 1 [0119.839] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9483e2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 0 [0119.839] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0119.839] GetProcessHeap () returned 0xae0000 [0119.839] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3440080 | out: hHeap=0xae0000) returned 1 [0119.839] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll", cAlternateFileName="")) returned 1 [0119.840] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463fb128, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xced4b5c5, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x463fb128, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x12d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado15.dll", cAlternateFileName="")) returned 1 [0119.840] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado20.tlb", cAlternateFileName="")) returned 1 [0119.840] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado21.tlb", cAlternateFileName="")) returned 1 [0119.840] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado25.tlb", cAlternateFileName="")) returned 1 [0119.840] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado26.tlb", cAlternateFileName="")) returned 1 [0119.841] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado27.tlb", cAlternateFileName="")) returned 1 [0119.841] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c6f28a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4c6f28a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4c6f28a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado28.tlb", cAlternateFileName="")) returned 1 [0119.841] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c6f28a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4c6f28a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4c6f28a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado60.tlb", cAlternateFileName="")) returned 1 [0119.841] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463fb128, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xd005e363, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x463fb128, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x58e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd.dll", cAlternateFileName="")) returned 1 [0119.841] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437960ad, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x437960ad, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x437960ad, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd28.tlb", cAlternateFileName="")) returned 1 [0119.841] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msador15.dll", cAlternateFileName="")) returned 1 [0119.842] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x438ed65e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x438ed65e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x438ed65e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msador28.tlb", cAlternateFileName="")) returned 1 [0119.842] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463fb128, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xc5b43065, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x463fb128, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x62e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox.dll", cAlternateFileName="")) returned 1 [0119.842] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c5ad98, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43c5ad98, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43c5ad98, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox28.tlb", cAlternateFileName="")) returned 1 [0119.842] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437960ad, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x437960ad, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x437960ad, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x16400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 1 [0119.842] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437960ad, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x437960ad, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x437960ad, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x16400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 0 [0119.842] FindClose (in: hFindFile=0xaf9178 | out: hFindFile=0xaf9178) returned 1 [0119.843] GetProcessHeap () returned 0xae0000 [0119.843] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34730b0 | out: hHeap=0xae0000) returned 1 [0119.847] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0xffffbd93, cFileName="DirectDB.dll", cAlternateFileName="")) returned 1 [0119.847] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffbd93, cFileName="en-US", cAlternateFileName="")) returned 1 [0119.847] GetProcessHeap () returned 0xae0000 [0119.847] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34730b0 [0119.848] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\en-US\\*", lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9178 [0119.849] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.849] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd86035, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 1 [0119.849] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd86035, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 0 [0119.849] FindClose (in: hFindFile=0xaf9178 | out: hFindFile=0xaf9178) returned 1 [0119.850] GetProcessHeap () returned 0xae0000 [0119.850] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34730b0 | out: hHeap=0xae0000) returned 1 [0119.850] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffbd93, cFileName="msadc", cAlternateFileName="")) returned 1 [0119.850] GetProcessHeap () returned 0xae0000 [0119.850] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34730b0 [0119.850] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\*", lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9178 [0120.309] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.309] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x276, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcjavas.inc", cAlternateFileName="")) returned 1 [0120.309] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41dce0ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41dce0ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41dce0ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x26f, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcvbs.inc", cAlternateFileName="")) returned 1 [0120.310] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0120.310] GetProcessHeap () returned 0xae0000 [0120.310] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3440080 [0120.312] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0120.312] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.312] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b99489e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll.mui", cAlternateFileName="")) returned 1 [0120.313] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9e0d51, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb2c9ec00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll.mui", cAlternateFileName="")) returned 1 [0120.313] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll.mui", cAlternateFileName="")) returned 1 [0120.313] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll.mui", cAlternateFileName="")) returned 1 [0120.313] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 1 [0120.313] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 0 [0120.313] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0120.314] GetProcessHeap () returned 0xae0000 [0120.314] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3440080 | out: hHeap=0xae0000) returned 1 [0120.314] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadce.dll", cAlternateFileName="")) returned 1 [0120.314] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41dce0ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41dce0ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41dce0ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll", cAlternateFileName="")) returned 1 [0120.346] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3b400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadco.dll", cAlternateFileName="")) returned 1 [0120.346] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll", cAlternateFileName="")) returned 1 [0120.346] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x44400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadds.dll", cAlternateFileName="")) returned 1 [0120.347] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44060e78, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x44060e78, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x44060e78, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll", cAlternateFileName="")) returned 1 [0120.347] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d5b9b4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d5b9b4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d5b9b4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll", cAlternateFileName="")) returned 1 [0120.347] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d5b9b4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d5b9b4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d5b9b4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x57000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprst.dll", cAlternateFileName="")) returned 1 [0120.347] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44060e78, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x44060e78, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x44060e78, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x36200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdarem.dll", cAlternateFileName="")) returned 1 [0120.347] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4403ac10, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4403ac10, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4403ac10, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll", cAlternateFileName="")) returned 1 [0120.347] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 1 [0120.348] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 0 [0120.348] FindClose (in: hFindFile=0xaf9178 | out: hFindFile=0xaf9178) returned 1 [0120.348] GetProcessHeap () returned 0xae0000 [0120.348] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34730b0 | out: hHeap=0xae0000) returned 1 [0120.351] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffbd93, cFileName="Ole DB", cAlternateFileName="OLEDB~1")) returned 1 [0120.351] GetProcessHeap () returned 0xae0000 [0120.351] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34730b0 [0120.352] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\*", lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9178 [0120.358] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.359] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0120.359] GetProcessHeap () returned 0xae0000 [0120.359] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3440080 [0120.362] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0120.362] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.362] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll.mui", cAlternateFileName="")) returned 1 [0120.363] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9e0d51, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll.mui", cAlternateFileName="")) returned 1 [0120.363] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll.mui", cAlternateFileName="")) returned 1 [0120.363] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb65d7300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 1 [0120.363] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb65d7300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 0 [0120.363] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0120.364] GetProcessHeap () returned 0xae0000 [0120.364] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3440080 | out: hHeap=0xae0000) returned 1 [0120.364] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x18600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaosp.dll", cAlternateFileName="")) returned 1 [0120.364] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5be00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaps.dll", cAlternateFileName="")) returned 1 [0120.364] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xaa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasql.dll", cAlternateFileName="")) returned 1 [0120.364] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll", cAlternateFileName="")) returned 1 [0120.364] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1ca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdatl3.dll", cAlternateFileName="")) returned 1 [0120.365] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msxactps.dll", cAlternateFileName="")) returned 1 [0120.365] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ce9283, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41ce9283, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41ce9283, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32.dll", cAlternateFileName="")) returned 1 [0120.365] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ce9283, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41ce9283, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41ce9283, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll", cAlternateFileName="")) returned 1 [0120.365] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ce9283, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41ce9283, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41ce9283, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x264c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbjvs.inc", cAlternateFileName="")) returned 1 [0120.365] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x26f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbvbs.inc", cAlternateFileName="")) returned 1 [0120.366] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c80ffc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43c80ffc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43c80ffc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.dll", cAlternateFileName="")) returned 1 [0120.366] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c80ffc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43c80ffc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43c80ffc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll", cAlternateFileName="")) returned 1 [0120.366] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4fa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.dll", cAlternateFileName="")) returned 1 [0120.366] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll", cAlternateFileName="")) returned 1 [0120.366] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll", cAlternateFileName="")) returned 0 [0120.366] FindClose (in: hFindFile=0xaf9178 | out: hFindFile=0xaf9178) returned 1 [0120.367] GetProcessHeap () returned 0xae0000 [0120.367] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34730b0 | out: hHeap=0xae0000) returned 1 [0120.369] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd0a00, dwReserved0=0x0, dwReserved1=0xffffbd93, cFileName="wab32.dll", cAlternateFileName="")) returned 1 [0120.369] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb600, dwReserved0=0x0, dwReserved1=0xffffbd93, cFileName="wab32res.dll", cAlternateFileName="")) returned 1 [0120.369] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb600, dwReserved0=0x0, dwReserved1=0xffffbd93, cFileName="wab32res.dll", cAlternateFileName="")) returned 0 [0120.370] FindClose (in: hFindFile=0xaf9138 | out: hFindFile=0xaf9138) returned 1 [0120.370] GetProcessHeap () returned 0xae0000 [0120.370] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3400060 | out: hHeap=0xae0000) returned 1 [0120.370] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 0 [0120.370] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0120.370] GetProcessHeap () returned 0xae0000 [0120.370] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f0058 | out: hHeap=0xae0000) returned 1 [0120.372] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a307d95, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d0779b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d0779b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0120.372] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x21c82a36, ftLastAccessTime.dwHighDateTime=0x1d5c098, ftLastWriteTime.dwLowDateTime=0x21c82a36, ftLastWriteTime.dwHighDateTime=0x1d5c098, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0120.372] GetProcessHeap () returned 0xae0000 [0120.372] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34730b0 [0120.373] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x21c82a36, ftLastAccessTime.dwHighDateTime=0x1d5c098, ftLastWriteTime.dwLowDateTime=0x21c82a36, ftLastWriteTime.dwHighDateTime=0x1d5c098, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9138 [0120.374] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x21c82a36, ftLastAccessTime.dwHighDateTime=0x1d5c098, ftLastWriteTime.dwLowDateTime=0x21c82a36, ftLastWriteTime.dwHighDateTime=0x1d5c098, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.374] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd9aaa80, ftCreationTime.dwHighDateTime=0x1d57657, ftLastAccessTime.dwLowDateTime=0xfd5cd560, ftLastAccessTime.dwHighDateTime=0x1d583b0, ftLastWriteTime.dwLowDateTime=0xfd5cd560, ftLastWriteTime.dwHighDateTime=0x1d583b0, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="downloadable-surveillance-governments.exe", cAlternateFileName="DOWNLO~1.EXE")) returned 1 [0120.374] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0120.374] GetProcessHeap () returned 0xae0000 [0120.374] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f0058 [0120.375] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\*", lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0120.376] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.376] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2dfe94, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x68e10600, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll.mui", cAlternateFileName="")) returned 1 [0120.793] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b3c4cb5, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe.mui", cAlternateFileName="")) returned 1 [0120.793] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2212c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x74ccc800, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 1 [0120.794] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2212c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x74ccc800, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 0 [0120.794] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0120.794] GetProcessHeap () returned 0xae0000 [0120.794] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f0058 | out: hHeap=0xae0000) returned 1 [0120.794] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a4ec31b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a4ec31b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a4ec31b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExtExport.exe", cAlternateFileName="")) returned 1 [0120.794] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd400, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll", cAlternateFileName="")) returned 1 [0120.795] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a49fe45, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="iediagcmd.exe", cAlternateFileName="")) returned 1 [0120.795] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a70c9a1, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xbc534b5e, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x4a70c9a1, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x7a800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe", cAlternateFileName="")) returned 1 [0120.795] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a49fe45, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x36c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ielowutil.exe", cAlternateFileName="")) returned 1 [0120.795] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a4c60b4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x63800, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEShims.dll", cAlternateFileName="")) returned 1 [0120.795] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa182b3a4, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa1c0b0e4, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x8ca44c00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc9340, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe", cAlternateFileName="")) returned 1 [0120.796] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0120.796] GetProcessHeap () returned 0xae0000 [0120.796] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f0058 [0120.796] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\images\\*", lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0120.796] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.797] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a55ea4d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a55ea4d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a55ea4d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0x0, cFileName="bing.ico", cAlternateFileName="")) returned 1 [0120.797] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a55ea4d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a55ea4d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a55ea4d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0x0, cFileName="bing.ico", cAlternateFileName="")) returned 0 [0120.797] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0120.797] GetProcessHeap () returned 0xae0000 [0120.797] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f0058 | out: hHeap=0xae0000) returned 1 [0120.797] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNUP", cAlternateFileName="")) returned 1 [0120.797] GetProcessHeap () returned 0xae0000 [0120.797] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f0058 [0120.797] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\*", lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0120.798] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.798] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30c952e, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x970b4468, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x970b4468, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 1 [0120.799] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30c952e, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x970b4468, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x970b4468, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 0 [0120.799] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0120.799] GetProcessHeap () returned 0xae0000 [0120.799] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f0058 | out: hHeap=0xae0000) returned 1 [0120.800] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc218, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0120.800] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc218, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0 [0120.800] FindClose (in: hFindFile=0xaf9138 | out: hFindFile=0xaf9138) returned 1 [0120.800] GetProcessHeap () returned 0xae0000 [0120.800] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34730b0 | out: hHeap=0xae0000) returned 1 [0120.802] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x21c82a36, ftLastAccessTime.dwHighDateTime=0x1d5c098, ftLastWriteTime.dwLowDateTime=0x21c82a36, ftLastWriteTime.dwHighDateTime=0x1d5c098, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Java", cAlternateFileName="")) returned 1 [0120.802] GetProcessHeap () returned 0xae0000 [0120.802] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34730b0 [0120.803] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x21c82a36, ftLastAccessTime.dwHighDateTime=0x1d5c098, ftLastWriteTime.dwLowDateTime=0x21c82a36, ftLastWriteTime.dwHighDateTime=0x1d5c098, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0120.804] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x21c82a36, ftLastAccessTime.dwHighDateTime=0x1d5c098, ftLastWriteTime.dwLowDateTime=0x21c82a36, ftLastWriteTime.dwHighDateTime=0x1d5c098, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.804] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f215dc0, ftCreationTime.dwHighDateTime=0x1d57228, ftLastAccessTime.dwLowDateTime=0xb828b710, ftLastAccessTime.dwHighDateTime=0x1d544f5, ftLastWriteTime.dwLowDateTime=0xb828b710, ftLastWriteTime.dwHighDateTime=0x1d544f5, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="edge.exe", cAlternateFileName="")) returned 1 [0120.804] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre1.8.0_144", cAlternateFileName="JRE18~1.0_1")) returned 1 [0120.804] GetProcessHeap () returned 0xae0000 [0120.804] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f0058 [0120.805] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\*", lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9138 [0120.808] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.808] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bin", cAlternateFileName="")) returned 1 [0120.808] GetProcessHeap () returned 0xae0000 [0120.808] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3400060 [0120.808] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\*", lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0120.810] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.812] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x172440, dwReserved0=0x0, dwReserved1=0x0, cFileName="awt.dll", cAlternateFileName="")) returned 1 [0120.812] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bci.dll", cAlternateFileName="")) returned 1 [0120.812] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="dcpr.dll", cAlternateFileName="")) returned 1 [0120.812] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15040, dwReserved0=0x0, dwReserved1=0x0, cFileName="decora_sse.dll", cAlternateFileName="DECORA~1.DLL")) returned 1 [0120.812] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8f840, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.dll", cAlternateFileName="")) returned 1 [0120.813] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dtplugin", cAlternateFileName="")) returned 1 [0120.813] GetProcessHeap () returned 0xae0000 [0120.813] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3440080 [0120.815] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9178 [0120.816] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.816] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfa840, dwReserved0=0x0, dwReserved1=0x0, cFileName="deployJava1.dll", cAlternateFileName="DEPLOY~1.DLL")) returned 1 [0120.816] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11a640, dwReserved0=0x0, dwReserved1=0x0, cFileName="npdeployJava1.dll", cAlternateFileName="NPDEPL~1.DLL")) returned 1 [0120.816] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11a640, dwReserved0=0x0, dwReserved1=0x0, cFileName="npdeployJava1.dll", cAlternateFileName="NPDEPL~1.DLL")) returned 0 [0120.817] FindClose (in: hFindFile=0xaf9178 | out: hFindFile=0xaf9178) returned 1 [0120.817] GetProcessHeap () returned 0xae0000 [0120.817] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3440080 | out: hHeap=0xae0000) returned 1 [0120.817] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_shmem.dll", cAlternateFileName="")) returned 1 [0120.817] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6040, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_socket.dll", cAlternateFileName="DT_SOC~1.DLL")) returned 1 [0120.817] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21440, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.dll", cAlternateFileName="")) returned 1 [0120.817] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x43040, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontmanager.dll", cAlternateFileName="FONTMA~1.DLL")) returned 1 [0120.818] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2da40, dwReserved0=0x0, dwReserved1=0x0, cFileName="fxplugins.dll", cAlternateFileName="FXPLUG~1.DLL")) returned 1 [0120.818] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x40e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="glass.dll", cAlternateFileName="")) returned 1 [0120.818] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6f440, dwReserved0=0x0, dwReserved1=0x0, cFileName="glib-lite.dll", cAlternateFileName="GLIB-L~1.DLL")) returned 1 [0120.818] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x97440, dwReserved0=0x0, dwReserved1=0x0, cFileName="gstreamer-lite.dll", cAlternateFileName="GSTREA~1.DLL")) returned 1 [0120.818] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x26a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="hprof.dll", cAlternateFileName="")) returned 1 [0120.819] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e240, dwReserved0=0x0, dwReserved1=0x0, cFileName="instrument.dll", cAlternateFileName="INSTRU~1.DLL")) returned 1 [0120.819] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2pcsc.dll", cAlternateFileName="")) returned 1 [0120.819] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf840, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2pkcs11.dll", cAlternateFileName="")) returned 1 [0120.819] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5240, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaas_nt.dll", cAlternateFileName="")) returned 1 [0120.819] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8640, dwReserved0=0x0, dwReserved1=0x0, cFileName="jabswitch.exe", cAlternateFileName="JABSWI~1.EXE")) returned 1 [0120.819] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="java-rmi.exe", cAlternateFileName="")) returned 1 [0120.820] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.dll", cAlternateFileName="")) returned 1 [0120.820] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.exe", cAlternateFileName="")) returned 1 [0120.820] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="JavaAccessBridge-64.dll", cAlternateFileName="JAVAAC~1.DLL")) returned 1 [0120.820] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2dc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="javacpl.cpl", cAlternateFileName="")) returned 1 [0120.820] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="javacpl.exe", cAlternateFileName="")) returned 1 [0120.821] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx_font.dll", cAlternateFileName="JAVAFX~1.DLL")) returned 1 [0120.821] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x83640, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx_font_t2k.dll", cAlternateFileName="JAVAFX~2.DLL")) returned 1 [0120.821] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1f440, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx_iio.dll", cAlternateFileName="JAVAFX~3.DLL")) returned 1 [0120.821] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaw.exe", cAlternateFileName="")) returned 1 [0120.821] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e040, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.exe", cAlternateFileName="")) returned 1 [0120.821] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440, dwReserved0=0x0, dwReserved1=0x0, cFileName="java_crw_demo.dll", cAlternateFileName="JAVA_C~1.DLL")) returned 1 [0120.822] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jawt.dll", cAlternateFileName="")) returned 1 [0120.822] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="JAWTAccessBridge-64.dll", cAlternateFileName="JAWTAC~1.DLL")) returned 1 [0120.824] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x31440, dwReserved0=0x0, dwReserved1=0x0, cFileName="jdwp.dll", cAlternateFileName="")) returned 1 [0120.824] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.dll", cAlternateFileName="")) returned 1 [0120.825] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22240, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxmedia.dll", cAlternateFileName="")) returned 1 [0120.825] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7511d3f, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7511d3f, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2794a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxwebkit.dll", cAlternateFileName="JFXWEB~1.DLL")) returned 1 [0120.825] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jjs.exe", cAlternateFileName="")) returned 1 [0120.825] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2aa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jli.dll", cAlternateFileName="")) returned 1 [0120.825] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa897bfc2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x48440, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2iexp.dll", cAlternateFileName="")) returned 1 [0120.826] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa897bfc2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa897bfc2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1b640, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2launcher.exe", cAlternateFileName="JP2LAU~1.EXE")) returned 1 [0120.826] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2native.dll", cAlternateFileName="JP2NAT~1.DLL")) returned 1 [0120.826] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2ssv.dll", cAlternateFileName="")) returned 1 [0120.826] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2d640, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpeg.dll", cAlternateFileName="")) returned 1 [0120.826] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdt.dll", cAlternateFileName="")) returned 1 [0120.826] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsound.dll", cAlternateFileName="")) returned 1 [0120.827] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsoundds.dll", cAlternateFileName="")) returned 1 [0120.827] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x35e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="kcms.dll", cAlternateFileName="")) returned 1 [0120.827] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="keytool.exe", cAlternateFileName="")) returned 1 [0120.827] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="kinit.exe", cAlternateFileName="")) returned 1 [0120.827] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="klist.exe", cAlternateFileName="")) returned 1 [0120.828] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="ktab.exe", cAlternateFileName="")) returned 1 [0120.828] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39040, dwReserved0=0x0, dwReserved1=0x0, cFileName="lcms.dll", cAlternateFileName="")) returned 1 [0120.828] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9040, dwReserved0=0x0, dwReserved1=0x0, cFileName="management.dll", cAlternateFileName="MANAGE~1.DLL")) returned 1 [0120.828] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9fa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="mlib_image.dll", cAlternateFileName="MLIB_I~1.DLL")) returned 1 [0120.828] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa12a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1 [0120.829] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xca750, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1 [0120.829] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1 [0120.829] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="net.dll", cAlternateFileName="")) returned 1 [0120.829] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xec40, dwReserved0=0x0, dwReserved1=0x0, cFileName="nio.dll", cAlternateFileName="")) returned 1 [0121.043] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="npt.dll", cAlternateFileName="")) returned 1 [0121.044] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="orbd.exe", cAlternateFileName="")) returned 1 [0121.044] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="pack200.exe", cAlternateFileName="")) returned 1 [0121.044] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin2", cAlternateFileName="")) returned 1 [0121.044] GetProcessHeap () returned 0xae0000 [0121.045] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3440080 [0121.045] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9178 [0121.048] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.049] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xca750, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1 [0121.049] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39440, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjp2.dll", cAlternateFileName="")) returned 1 [0121.049] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39440, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjp2.dll", cAlternateFileName="")) returned 0 [0121.049] FindClose (in: hFindFile=0xaf9178 | out: hFindFile=0xaf9178) returned 1 [0121.049] GetProcessHeap () returned 0xae0000 [0121.050] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3440080 | out: hHeap=0xae0000) returned 1 [0121.050] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="policytool.exe", cAlternateFileName="POLICY~1.EXE")) returned 1 [0121.050] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe040, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism_common.dll", cAlternateFileName="PRISM_~1.DLL")) returned 1 [0121.050] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1fe40, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism_d3d.dll", cAlternateFileName="PRISM_~2.DLL")) returned 1 [0121.052] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism_sw.dll", cAlternateFileName="")) returned 1 [0121.052] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.dll", cAlternateFileName="")) returned 1 [0121.052] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmid.exe", cAlternateFileName="")) returned 1 [0121.052] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8af971e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmiregistry.exe", cAlternateFileName="RMIREG~1.EXE")) returned 1 [0121.052] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="server", cAlternateFileName="")) returned 1 [0121.053] GetProcessHeap () returned 0xae0000 [0121.053] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3440080 [0121.053] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9178 [0121.053] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.053] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xab35b530, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xab35b530, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xabaa88bc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11d0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="classes.jsa", cAlternateFileName="")) returned 1 [0121.054] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x866c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.dll", cAlternateFileName="")) returned 1 [0121.054] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x58f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xusage.txt", cAlternateFileName="")) returned 1 [0121.054] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x58f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xusage.txt", cAlternateFileName="")) returned 0 [0121.054] FindClose (in: hFindFile=0xaf9178 | out: hFindFile=0xaf9178) returned 1 [0121.054] GetProcessHeap () returned 0xae0000 [0121.055] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3440080 | out: hHeap=0xae0000) returned 1 [0121.055] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="servertool.exe", cAlternateFileName="SERVER~1.EXE")) returned 1 [0121.055] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32040, dwReserved0=0x0, dwReserved1=0x0, cFileName="splashscreen.dll", cAlternateFileName="SPLASH~1.DLL")) returned 1 [0121.055] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8ba40, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssv.dll", cAlternateFileName="")) returned 1 [0121.055] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssvagent.exe", cAlternateFileName="")) returned 1 [0121.055] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21240, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunec.dll", cAlternateFileName="")) returned 1 [0121.056] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunmscapi.dll", cAlternateFileName="SUNMSC~1.DLL")) returned 1 [0121.056] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e440, dwReserved0=0x0, dwReserved1=0x0, cFileName="t2k.dll", cAlternateFileName="")) returned 1 [0121.056] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="tnameserv.exe", cAlternateFileName="TNAMES~1.EXE")) returned 1 [0121.056] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13840, dwReserved0=0x0, dwReserved1=0x0, cFileName="unpack.dll", cAlternateFileName="")) returned 1 [0121.056] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x30240, dwReserved0=0x0, dwReserved1=0x0, cFileName="unpack200.exe", cAlternateFileName="UNPACK~1.EXE")) returned 1 [0121.057] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc040, dwReserved0=0x0, dwReserved1=0x0, cFileName="verify.dll", cAlternateFileName="")) returned 1 [0121.057] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="w2k_lsa_auth.dll", cAlternateFileName="W2K_LS~1.DLL")) returned 1 [0121.057] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1ae40, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsAccessBridge-64.dll", cAlternateFileName="WINDOW~1.DLL")) returned 1 [0121.057] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2f040, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsdetect.dll", cAlternateFileName="")) returned 1 [0121.057] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13040, dwReserved0=0x0, dwReserved1=0x0, cFileName="zip.dll", cAlternateFileName="")) returned 1 [0121.058] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13040, dwReserved0=0x0, dwReserved1=0x0, cFileName="zip.dll", cAlternateFileName="")) returned 0 [0121.058] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0121.058] GetProcessHeap () returned 0xae0000 [0121.058] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3400060 | out: hHeap=0xae0000) returned 1 [0121.061] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcac, dwReserved0=0x0, dwReserved1=0x0, cFileName="COPYRIGHT", cAlternateFileName="COPYRI~1")) returned 1 [0121.061] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lib", cAlternateFileName="")) returned 1 [0121.061] GetProcessHeap () returned 0xae0000 [0121.061] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3400060 [0121.062] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\*", lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9178 [0121.070] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.073] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x95, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.properties", cAlternateFileName="ACCESS~1.PRO")) returned 1 [0121.074] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64", cAlternateFileName="")) returned 1 [0121.074] GetProcessHeap () returned 0xae0000 [0121.074] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3440080 [0121.076] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0121.080] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.080] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27a, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.cfg", cAlternateFileName="")) returned 1 [0121.080] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27a, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.cfg", cAlternateFileName="")) returned 0 [0121.080] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0121.081] GetProcessHeap () returned 0xae0000 [0121.081] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3440080 | out: hHeap=0xae0000) returned 1 [0121.081] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="applet", cAlternateFileName="")) returned 1 [0121.081] GetProcessHeap () returned 0xae0000 [0121.081] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3440080 [0121.081] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\applet\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0121.082] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.083] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0121.083] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0121.083] GetProcessHeap () returned 0xae0000 [0121.083] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3440080 | out: hHeap=0xae0000) returned 1 [0121.083] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x562, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendars.properties", cAlternateFileName="CALEND~1.PRO")) returned 1 [0121.083] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa7bbd53, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa7bbd53, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e56fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="charsets.jar", cAlternateFileName="")) returned 1 [0121.083] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x14983, dwReserved0=0x0, dwReserved1=0x0, cFileName="classlist", cAlternateFileName="CLASSL~1")) returned 1 [0121.084] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105e2a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cmm", cAlternateFileName="")) returned 1 [0121.084] GetProcessHeap () returned 0xae0000 [0121.084] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3440080 [0121.084] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105e2a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0121.085] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105e2a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.085] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc824, dwReserved0=0x0, dwReserved1=0x0, cFileName="CIEXYZ.pf", cAlternateFileName="")) returned 1 [0121.086] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x278, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAY.pf", cAlternateFileName="")) returned 1 [0121.086] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINEAR_RGB.pf", cAlternateFileName="LINEAR~1.PF")) returned 1 [0121.086] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4302a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PYCC.pf", cAlternateFileName="")) returned 1 [0121.086] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="sRGB.pf", cAlternateFileName="")) returned 1 [0121.086] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="sRGB.pf", cAlternateFileName="")) returned 0 [0121.086] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0121.087] GetProcessHeap () returned 0xae0000 [0121.087] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3440080 | out: hHeap=0xae0000) returned 1 [0121.087] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-types.properties", cAlternateFileName="CONTEN~1.PRO")) returned 1 [0121.087] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x101a, dwReserved0=0x0, dwReserved1=0x0, cFileName="currency.data", cAlternateFileName="CURREN~1.DAT")) returned 1 [0121.087] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy", cAlternateFileName="")) returned 1 [0121.087] GetProcessHeap () returned 0xae0000 [0121.087] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3440080 [0121.088] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0121.297] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.297] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x374c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ffjcext.zip", cAlternateFileName="")) returned 1 [0121.297] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.properties", cAlternateFileName="MESSAG~1.PRO")) returned 1 [0121.297] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_de.properties", cAlternateFileName="MESSAG~2.PRO")) returned 1 [0121.298] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe10, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_es.properties", cAlternateFileName="MESSAG~3.PRO")) returned 1 [0121.298] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_fr.properties", cAlternateFileName="MESSAG~4.PRO")) returned 1 [0121.298] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc97, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_it.properties", cAlternateFileName="MEC9EA~1.PRO")) returned 1 [0121.299] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x18cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_ja.properties", cAlternateFileName="ME4AF1~1.PRO")) returned 1 [0121.299] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1650, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_ko.properties", cAlternateFileName="ME1706~1.PRO")) returned 1 [0121.299] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_pt_BR.properties", cAlternateFileName="MED1E1~1.PRO")) returned 1 [0121.299] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_sv.properties", cAlternateFileName="ME0541~1.PRO")) returned 1 [0121.299] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_CN.properties", cAlternateFileName="ME40CD~1.PRO")) returned 1 [0121.300] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_HK.properties", cAlternateFileName="MEB8B5~1.PRO")) returned 1 [0121.300] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_TW.properties", cAlternateFileName="MECC18~1.PRO")) returned 1 [0121.300] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x218e, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash.gif", cAlternateFileName="")) returned 1 [0121.300] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bac, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash@2x.gif", cAlternateFileName="SPLASH~1.GIF")) returned 1 [0121.300] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash_11-lic.gif", cAlternateFileName="SPLASH~2.GIF")) returned 1 [0121.301] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2fda, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash_11@2x-lic.gif", cAlternateFileName="SPLASH~3.GIF")) returned 1 [0121.301] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2fda, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash_11@2x-lic.gif", cAlternateFileName="SPLASH~3.GIF")) returned 0 [0121.301] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0121.303] GetProcessHeap () returned 0xae0000 [0121.303] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3440080 | out: hHeap=0xae0000) returned 1 [0121.303] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ed9405, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8ed9405, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa900a6f7, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ce7de, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.jar", cAlternateFileName="")) returned 1 [0121.303] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa11bdb26, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ext", cAlternateFileName="")) returned 1 [0121.304] GetProcessHeap () returned 0xae0000 [0121.304] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3440080 [0121.304] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa11bdb26, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0121.310] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa11bdb26, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.311] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2de78, dwReserved0=0x0, dwReserved1=0x0, cFileName="access-bridge-64.jar", cAlternateFileName="ACCESS~1.JAR")) returned 1 [0121.311] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3ae816, dwReserved0=0x0, dwReserved1=0x0, cFileName="cldrdata.jar", cAlternateFileName="")) returned 1 [0121.311] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x205e, dwReserved0=0x0, dwReserved1=0x0, cFileName="dnsns.jar", cAlternateFileName="")) returned 1 [0121.311] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xade4, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaccess.jar", cAlternateFileName="")) returned 1 [0121.311] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1166a99, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxrt.jar", cAlternateFileName="")) returned 1 [0121.312] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa8546b2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa8546b2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21a46d, dwReserved0=0x0, dwReserved1=0x0, cFileName="localedata.jar", cAlternateFileName="LOCALE~1.JAR")) returned 1 [0121.312] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="meta-index", cAlternateFileName="META-I~1")) returned 1 [0121.312] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1edd4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="nashorn.jar", cAlternateFileName="")) returned 1 [0121.312] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa4c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunec.jar", cAlternateFileName="")) returned 1 [0121.312] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x44661, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunjce_provider.jar", cAlternateFileName="SUNJCE~1.JAR")) returned 1 [0121.312] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7fbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunmscapi.jar", cAlternateFileName="SUNMSC~1.JAR")) returned 1 [0121.313] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3d5bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunpkcs11.jar", cAlternateFileName="SUNPKC~1.JAR")) returned 1 [0121.313] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10d3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="zipfs.jar", cAlternateFileName="")) returned 1 [0121.313] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10d3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="zipfs.jar", cAlternateFileName="")) returned 0 [0121.313] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0121.316] GetProcessHeap () returned 0xae0000 [0121.316] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3440080 | out: hHeap=0xae0000) returned 1 [0121.316] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="flavormap.properties", cAlternateFileName="FLAVOR~1.PRO")) returned 1 [0121.316] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xeba, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontconfig.bfc", cAlternateFileName="FONTCO~1.BFC")) returned 1 [0121.317] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2948, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontconfig.properties.src", cAlternateFileName="FONTCO~1.SRC")) returned 1 [0121.317] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fonts", cAlternateFileName="")) returned 1 [0121.317] GetProcessHeap () returned 0xae0000 [0121.317] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3440080 [0121.317] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0121.322] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.322] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12588, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightDemiBold.ttf", cAlternateFileName="LUCIDA~1.TTF")) returned 1 [0121.323] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12574, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightDemiItalic.ttf", cAlternateFileName="LUCIDA~2.TTF")) returned 1 [0121.323] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13bd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightItalic.ttf", cAlternateFileName="LUCIDA~3.TTF")) returned 1 [0121.323] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5434c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightRegular.ttf", cAlternateFileName="LUCIDA~4.TTF")) returned 1 [0121.323] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4d9c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaSansDemiBold.ttf", cAlternateFileName="LU38C7~1.TTF")) returned 1 [0121.323] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaa77c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaSansRegular.ttf", cAlternateFileName="LU761B~1.TTF")) returned 1 [0121.324] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39254, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterBold.ttf", cAlternateFileName="LUE73B~1.TTF")) returned 1 [0121.324] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterRegular.ttf", cAlternateFileName="LUDBAB~1.TTF")) returned 1 [0121.324] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterRegular.ttf", cAlternateFileName="LUDBAB~1.TTF")) returned 0 [0121.324] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0121.326] GetProcessHeap () returned 0xae0000 [0121.326] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3440080 | out: hHeap=0xae0000) returned 1 [0121.326] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x368a, dwReserved0=0x0, dwReserved1=0x0, cFileName="hijrah-config-umalqura.properties", cAlternateFileName="HIJRAH~1.PRO")) returned 1 [0121.327] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0121.327] GetProcessHeap () returned 0xae0000 [0121.327] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3440080 [0121.327] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0121.328] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.329] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cursors", cAlternateFileName="")) returned 1 [0121.329] GetProcessHeap () returned 0xae0000 [0121.329] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0121.329] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\*", lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34868c0 [0121.660] FindNextFileW (in: hFindFile=0x34868c0, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.660] FindNextFileW (in: hFindFile=0x34868c0, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x500, dwReserved0=0x0, dwReserved1=0x0, cFileName="cursors.properties", cAlternateFileName="CURSOR~1.PRO")) returned 1 [0121.660] FindNextFileW (in: hFindFile=0x34868c0, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="invalid32x32.gif", cAlternateFileName="INVALI~1.GIF")) returned 1 [0121.660] FindNextFileW (in: hFindFile=0x34868c0, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_CopyDrop32x32.gif", cAlternateFileName="WIN32_~1.GIF")) returned 1 [0121.661] FindNextFileW (in: hFindFile=0x34868c0, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_CopyNoDrop32x32.gif", cAlternateFileName="WIN32_~2.GIF")) returned 1 [0121.661] FindNextFileW (in: hFindFile=0x34868c0, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_LinkDrop32x32.gif", cAlternateFileName="WIN32_~3.GIF")) returned 1 [0121.661] FindNextFileW (in: hFindFile=0x34868c0, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_LinkNoDrop32x32.gif", cAlternateFileName="WIN32_~4.GIF")) returned 1 [0121.661] FindNextFileW (in: hFindFile=0x34868c0, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x93, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_MoveDrop32x32.gif", cAlternateFileName="WI06CF~1.GIF")) returned 1 [0121.661] FindNextFileW (in: hFindFile=0x34868c0, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_MoveNoDrop32x32.gif", cAlternateFileName="WIE2D6~1.GIF")) returned 1 [0121.662] FindNextFileW (in: hFindFile=0x34868c0, lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_MoveNoDrop32x32.gif", cAlternateFileName="WIE2D6~1.GIF")) returned 0 [0121.662] FindClose (in: hFindFile=0x34868c0 | out: hFindFile=0x34868c0) returned 1 [0121.664] GetProcessHeap () returned 0xae0000 [0121.664] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0121.664] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cursors", cAlternateFileName="")) returned 0 [0121.664] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0121.683] GetProcessHeap () returned 0xae0000 [0121.683] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3440080 | out: hHeap=0xae0000) returned 1 [0121.685] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx.properties", cAlternateFileName="JAVAFX~1.PRO")) returned 1 [0121.685] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8e40a9d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8e40a9d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8e66d0e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe6827, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.jar", cAlternateFileName="")) returned 1 [0121.686] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c6de, dwReserved0=0x0, dwReserved1=0x0, cFileName="jce.jar", cAlternateFileName="")) returned 1 [0121.686] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr", cAlternateFileName="")) returned 1 [0121.686] GetProcessHeap () returned 0xae0000 [0121.686] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3440080 [0121.688] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0121.690] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.690] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="default.jfc", cAlternateFileName="")) returned 1 [0121.690] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e61, dwReserved0=0x0, dwReserved1=0x0, cFileName="profile.jfc", cAlternateFileName="")) returned 1 [0121.690] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e61, dwReserved0=0x0, dwReserved1=0x0, cFileName="profile.jfc", cAlternateFileName="")) returned 0 [0121.690] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0121.690] GetProcessHeap () returned 0xae0000 [0121.691] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3440080 | out: hHeap=0xae0000) returned 1 [0121.691] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x88dc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.jar", cAlternateFileName="")) returned 1 [0121.691] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x848c, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxswt.jar", cAlternateFileName="")) returned 1 [0121.691] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa76f896, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa76f896, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa76f896, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsse.jar", cAlternateFileName="")) returned 1 [0121.691] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1082, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.hprof.txt", cAlternateFileName="JVMHPR~1.TXT")) returned 1 [0121.691] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x997, dwReserved0=0x0, dwReserved1=0x0, cFileName="logging.properties", cAlternateFileName="LOGGIN~1.PRO")) returned 1 [0121.692] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="management", cAlternateFileName="MANAGE~1")) returned 1 [0121.692] GetProcessHeap () returned 0xae0000 [0121.692] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3440080 [0121.692] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0121.700] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.700] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="jmxremote.access", cAlternateFileName="JMXREM~1.ACC")) returned 1 [0121.701] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb28, dwReserved0=0x0, dwReserved1=0x0, cFileName="jmxremote.password.template", cAlternateFileName="JMXREM~1.TEM")) returned 1 [0121.701] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3926, dwReserved0=0x0, dwReserved1=0x0, cFileName="management.properties", cAlternateFileName="MANAGE~1.PRO")) returned 1 [0121.701] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd30, dwReserved0=0x0, dwReserved1=0x0, cFileName="snmp.acl.template", cAlternateFileName="SNMPAC~1.TEM")) returned 1 [0121.701] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd30, dwReserved0=0x0, dwReserved1=0x0, cFileName="snmp.acl.template", cAlternateFileName="SNMPAC~1.TEM")) returned 0 [0121.701] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0121.704] GetProcessHeap () returned 0xae0000 [0121.704] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3440080 | out: hHeap=0xae0000) returned 1 [0121.704] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17d, dwReserved0=0x0, dwReserved1=0x0, cFileName="management-agent.jar", cAlternateFileName="MANAGE~1.JAR")) returned 1 [0121.704] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x84e, dwReserved0=0x0, dwReserved1=0x0, cFileName="meta-index", cAlternateFileName="META-I~1")) returned 1 [0121.704] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1170, dwReserved0=0x0, dwReserved1=0x0, cFileName="net.properties", cAlternateFileName="NET~1.PRO")) returned 1 [0121.704] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d81efe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8d81efe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8df45fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1d588b, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.jar", cAlternateFileName="")) returned 1 [0121.705] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaec, dwReserved0=0x0, dwReserved1=0x0, cFileName="psfont.properties.ja", cAlternateFileName="PSFONT~1.JA")) returned 1 [0121.705] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2899, dwReserved0=0x0, dwReserved1=0x0, cFileName="psfontj2d.properties", cAlternateFileName="PSFONT~1.PRO")) returned 1 [0121.706] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x354add, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.jar", cAlternateFileName="RESOUR~1.JAR")) returned 1 [0121.706] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa90a30aa, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa90a30aa, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa7233eb, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x340865b, dwReserved0=0x0, dwReserved1=0x0, cFileName="rt.jar", cAlternateFileName="")) returned 1 [0121.706] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="security", cAlternateFileName="")) returned 1 [0121.706] GetProcessHeap () returned 0xae0000 [0121.706] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3440080 [0121.706] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0121.711] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.711] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="blacklist", cAlternateFileName="BLACKL~1")) returned 1 [0121.712] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="blacklisted.certs", cAlternateFileName="BLACKL~1.CER")) returned 1 [0121.712] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c0eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="cacerts", cAlternateFileName="")) returned 1 [0121.712] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.policy", cAlternateFileName="JAVA~1.POL")) returned 1 [0121.712] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eac, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.security", cAlternateFileName="JAVA~1.SEC")) returned 1 [0121.712] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x62, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.policy", cAlternateFileName="JAVAWS~1.POL")) returned 1 [0121.713] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xdc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="local_policy.jar", cAlternateFileName="LOCAL_~1.JAR")) returned 1 [0121.713] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="trusted.libraries", cAlternateFileName="TRUSTE~1.LIB")) returned 1 [0121.713] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="US_export_policy.jar", cAlternateFileName="US_EXP~1.JAR")) returned 1 [0121.713] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="US_export_policy.jar", cAlternateFileName="US_EXP~1.JAR")) returned 0 [0121.713] FindClose (in: hFindFile=0xaf91b8 | out: hFindFile=0xaf91b8) returned 1 [0121.715] GetProcessHeap () returned 0xae0000 [0121.716] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3440080 | out: hHeap=0xae0000) returned 1 [0121.716] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="sound.properties", cAlternateFileName="SOUND~1.PRO")) returned 1 [0121.716] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x19c1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="tzdb.dat", cAlternateFileName="")) returned 1 [0121.716] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x20d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tzmappings", cAlternateFileName="TZMAPP~1")) returned 1 [0121.716] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x20d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tzmappings", cAlternateFileName="TZMAPP~1")) returned 0 [0121.716] FindClose (in: hFindFile=0xaf9178 | out: hFindFile=0xaf9178) returned 1 [0121.716] GetProcessHeap () returned 0xae0000 [0121.717] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3400060 | out: hHeap=0xae0000) returned 1 [0121.719] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICENSE", cAlternateFileName="")) returned 1 [0121.719] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="README.txt", cAlternateFileName="")) returned 1 [0121.719] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x210, dwReserved0=0x0, dwReserved1=0x0, cFileName="release", cAlternateFileName="")) returned 1 [0121.720] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="THIRDPARTYLICENSEREADME-JAVAFX.txt", cAlternateFileName="THIRDP~1.TXT")) returned 1 [0121.720] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2371c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THIRDPARTYLICENSEREADME.txt", cAlternateFileName="THIRDP~2.TXT")) returned 1 [0121.993] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome.html", cAlternateFileName="WELCOM~1.HTM")) returned 1 [0121.994] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome.html", cAlternateFileName="WELCOM~1.HTM")) returned 0 [0121.994] FindClose (in: hFindFile=0xaf9138 | out: hFindFile=0xaf9138) returned 1 [0121.994] GetProcessHeap () returned 0xae0000 [0121.994] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f0058 | out: hHeap=0xae0000) returned 1 [0121.995] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre1.8.0_144", cAlternateFileName="JRE18~1.0_1")) returned 0 [0121.995] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0121.995] GetProcessHeap () returned 0xae0000 [0121.995] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34730b0 | out: hHeap=0xae0000) returned 1 [0121.997] FindNextFileW (in: hFindFile=0xaf9538, lpFindFileData=0x2b6f6c8 | out: lpFindFileData=0x2b6f6c8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x21d41573, ftLastAccessTime.dwHighDateTime=0x1d5c098, ftLastWriteTime.dwLowDateTime=0x21d41573, ftLastWriteTime.dwHighDateTime=0x1d5c098, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Microsoft Office", cAlternateFileName="MICROS~2")) returned 1 [0121.997] GetProcessHeap () returned 0xae0000 [0121.998] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34730b0 [0121.998] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\*", lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x21d41573, ftLastAccessTime.dwHighDateTime=0x1d5c098, ftLastWriteTime.dwLowDateTime=0x21d41573, ftLastWriteTime.dwHighDateTime=0x1d5c098, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9138 [0121.999] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x21d41573, ftLastAccessTime.dwHighDateTime=0x1d5c098, ftLastWriteTime.dwLowDateTime=0x21d41573, ftLastWriteTime.dwHighDateTime=0x1d5c098, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.999] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d6778e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9e9425d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x5ab2f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.xml", cAlternateFileName="APPXMA~1.XML")) returned 1 [0121.999] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe30322a0, ftCreationTime.dwHighDateTime=0x1d59a12, ftLastAccessTime.dwLowDateTime=0xf0b24c50, ftLastAccessTime.dwHighDateTime=0x1d55020, ftLastWriteTime.dwLowDateTime=0xf0b24c50, ftLastWriteTime.dwHighDateTime=0x1d55020, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="disagree.exe", cAlternateFileName="")) returned 1 [0121.999] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSystemMetadata.xml", cAlternateFileName="FILESY~1.XML")) returned 1 [0122.000] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office16", cAlternateFileName="")) returned 1 [0122.000] GetProcessHeap () returned 0xae0000 [0122.000] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f0058 [0122.003] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\*", lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0122.003] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.003] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xd9e7b530, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x2a9c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPP.HTM", cAlternateFileName="")) returned 1 [0122.004] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ea17a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x17103, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPP.VBS", cAlternateFileName="")) returned 1 [0122.004] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x6a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPREARM.EXE", cAlternateFileName="OSPPRE~1.EXE")) returned 1 [0122.004] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xda9a8629, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x8df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLERROR.XML", cAlternateFileName="")) returned 1 [0122.004] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xda9a8629, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x8df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLERROR.XML", cAlternateFileName="")) returned 0 [0122.004] FindClose (in: hFindFile=0xaf9678 | out: hFindFile=0xaf9678) returned 1 [0122.005] GetProcessHeap () returned 0xae0000 [0122.005] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f0058 | out: hHeap=0xae0000) returned 1 [0122.005] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PackageManifests", cAlternateFileName="PACKAG~1")) returned 1 [0122.005] GetProcessHeap () returned 0xae0000 [0122.005] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f0058 [0122.005] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\*", lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9178 [0122.009] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.009] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5e91c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", cAlternateFileName="APA05A~1.XML")) returned 1 [0122.009] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8351d7a8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8351d7a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", cAlternateFileName="APAD0B~1.XML")) returned 1 [0122.010] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc3863, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", cAlternateFileName="APEDE2~1.XML")) returned 1 [0122.010] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP51DE~1.XML")) returned 1 [0122.010] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x79381, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~4.XML")) returned 1 [0122.010] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ecd099, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", cAlternateFileName="APCEE5~1.XML")) returned 1 [0122.010] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3df10, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP557F~1.XML")) returned 1 [0122.011] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", cAlternateFileName="APE193~1.XML")) returned 1 [0122.011] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x112a4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", cAlternateFileName="APC1E2~1.XML")) returned 1 [0122.011] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4bfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", cAlternateFileName="APC422~1.XML")) returned 1 [0122.011] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xba5e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP2169~1.XML")) returned 1 [0122.011] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP7BBA~1.XML")) returned 1 [0122.011] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", cAlternateFileName="APEF10~1.XML")) returned 1 [0122.012] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", cAlternateFileName="AP5F49~1.XML")) returned 1 [0122.012] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", cAlternateFileName="APB0FE~1.XML")) returned 1 [0122.012] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x34b4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP8AF5~1.XML")) returned 1 [0122.012] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", cAlternateFileName="APF26A~1.XML")) returned 1 [0122.012] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf33deae, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", cAlternateFileName="APC553~1.XML")) returned 1 [0122.013] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf2f172d, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x53d21, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP9FA1~1.XML")) returned 1 [0122.013] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3a41, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP330B~1.XML")) returned 1 [0122.013] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x573e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~1.XML")) returned 1 [0122.013] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP6206~1.XML")) returned 1 [0122.014] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfdea, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", cAlternateFileName="APD1EA~1.XML")) returned 1 [0122.014] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP6EFE~1.XML")) returned 1 [0122.014] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf98c485a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", cAlternateFileName="APB63F~1.XML")) returned 1 [0122.014] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", cAlternateFileName="APB913~1.XML")) returned 1 [0122.014] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP4637~1.XML")) returned 1 [0122.014] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x618a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP2FE2~1.XML")) returned 1 [0122.015] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP2C4B~1.XML")) returned 1 [0122.015] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", cAlternateFileName="APF00A~1.XML")) returned 1 [0122.015] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~2.XML")) returned 1 [0122.015] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP202C~1.XML")) returned 1 [0122.015] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", cAlternateFileName="APBC30~1.XML")) returned 1 [0122.016] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", cAlternateFileName="APCB35~1.XML")) returned 1 [0122.016] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP5E1E~1.XML")) returned 1 [0122.016] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x80e56, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~3.XML")) returned 1 [0122.016] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", cAlternateFileName="APE0B7~1.XML")) returned 1 [0122.016] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP8BF9~1.XML")) returned 1 [0122.017] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x212876, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.common.xml", cAlternateFileName="AP3FD6~1.XML")) returned 1 [0122.017] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2667, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifestLoc.en-us.xml", cAlternateFileName="AP942B~1.XML")) returned 1 [0122.017] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x175, dwReserved0=0x0, dwReserved1=0x0, cFileName="AuthoredExtensions.xml", cAlternateFileName="AUTHOR~1.XML")) returned 1 [0122.017] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x175, dwReserved0=0x0, dwReserved1=0x0, cFileName="AuthoredExtensions.xml", cAlternateFileName="AUTHOR~1.XML")) returned 0 [0122.018] FindClose (in: hFindFile=0xaf9178 | out: hFindFile=0xaf9178) returned 1 [0122.020] GetProcessHeap () returned 0xae0000 [0122.020] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x33f0058 | out: hHeap=0xae0000) returned 1 [0122.020] FindNextFileW (in: hFindFile=0xaf9138, lpFindFileData=0x2b6f438 | out: lpFindFileData=0x2b6f438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0122.021] GetProcessHeap () returned 0xae0000 [0122.021] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33f0058 [0122.021] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\*", lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9678 [0122.021] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.021] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2ca2e08, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="client", cAlternateFileName="")) returned 1 [0122.025] GetProcessHeap () returned 0xae0000 [0122.025] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3400060 [0122.025] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\*", lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2ca2e08, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9178 [0122.029] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2ca2e08, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.029] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0715cb9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0715cb9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0952017, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1 [0122.030] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0952017, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0952017, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0a832cb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="API-MS~3.DLL")) returned 1 [0122.030] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd089348e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd089348e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd09c4608, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1 [0122.030] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd115de42, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd115de42, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd158a009, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="AP750A~1.DLL")) returned 1 [0122.030] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0d0baf0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0d0baf0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0eaf4e3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="APF10C~1.DLL")) returned 1 [0122.030] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0c4cdf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0c4cdf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0df0820, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1 [0122.030] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0c26cd1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0c26cd1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0e62fac, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="APA632~1.DLL")) returned 1 [0122.031] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd289cda7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd289cda7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2a1a592, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1 [0122.031] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0b8e391, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0b8e391, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0d7e20c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1 [0122.031] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0aa952a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0aa952a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0bda864, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="APC00F~1.DLL")) returned 1 [0122.031] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0aa952a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0aa952a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0c99389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="API-MS~4.DLL")) returned 1 [0122.031] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0af5a16, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0af5a16, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0c4cdf5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1 [0122.032] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e086ac, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e086ac, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2365abe, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1 [0122.032] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1137cdf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1137cdf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1d23858, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="APAE51~1.DLL")) returned 1 [0122.032] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1006983, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1006983, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1242d5d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x68c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1 [0122.032] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0f9426a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0f9426a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd121c9ea, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1 [0122.385] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0f9426a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0f9426a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd139a18a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="APFCAD~1.DLL")) returned 1 [0122.385] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0eaf4e3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0eaf4e3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd11d067c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="AP8F34~1.DLL")) returned 1 [0122.385] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0dca676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0dca676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1078ffd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="APD1B7~1.DLL")) returned 1 [0122.385] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0eaf4e3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0eaf4e3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd10c55e8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="APBF0F~1.DLL")) returned 1 [0122.386] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0dca676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0dca676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0f9426a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1 [0122.386] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1b7fe91, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1b7fe91, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1ec71c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1 [0122.386] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1b59cda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1b59cda, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1f1370b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x34ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVDllSurrogate32.exe", cAlternateFileName="APPVDL~2.EXE")) returned 1 [0122.386] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1e2e85a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVDllSurrogate64.exe", cAlternateFileName="APPVDL~1.EXE")) returned 1 [0122.386] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86813dc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86813dc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvStream32.dll", cAlternateFileName="APPVIS~1.DLL")) returned 1 [0122.387] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86813dc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86813dc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvStream64.dll", cAlternateFileName="APPVIS~2.DLL")) returned 1 [0122.387] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86813dc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86813dc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvSubsystems32.dll", cAlternateFileName="APPVIS~3.DLL")) returned 1 [0122.387] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x8683a0f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8683a0f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8683a0f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvSubsystems64.dll", cAlternateFileName="APPVIS~4.DLL")) returned 1 [0122.387] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1e7acf5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x69630, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppVLP.exe", cAlternateFileName="")) returned 1 [0122.388] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x8683a0f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8683a0f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8683a0f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2R32.dll", cAlternateFileName="")) returned 1 [0122.388] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x8683a0f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8683a0f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8683a0f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2R64.dll", cAlternateFileName="")) returned 1 [0122.388] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd11f68b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd11f68b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd191da0e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x514a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1 [0122.388] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1242d5d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1242d5d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1bcc41c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5644a0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="mfc140u.dll", cAlternateFileName="")) returned 1 [0122.388] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1f5fb21, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd244aa14, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa12a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1 [0122.389] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1ea0ff2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1ea0ff2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd20449b3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9b0a0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1 [0122.389] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e7acf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e7acf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1fac086, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1 [0122.389] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e2e85a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e2e85a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1f5fb21, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xefec0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ucrtbase.dll", cAlternateFileName="")) returned 1 [0122.389] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2ca2e08, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2f0533c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f4b0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="vccorlib140.dll", cAlternateFileName="VCCORL~1.DLL")) returned 1 [0122.389] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2424784, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2424784, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26acf16, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1 [0122.390] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2424784, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2424784, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26acf16, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 0 [0122.390] FindClose (in: hFindFile=0xaf9178 | out: hFindFile=0xaf9178) returned 1 [0122.393] GetProcessHeap () returned 0xae0000 [0122.393] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3400060 | out: hHeap=0xae0000) returned 1 [0122.393] FindNextFileW (in: hFindFile=0xaf9678, lpFindFileData=0x2b6f1a8 | out: lpFindFileData=0x2b6f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLIPART", cAlternateFileName="")) returned 1 [0122.393] GetProcessHeap () returned 0xae0000 [0122.393] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3400060 [0122.393] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\*", lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0122.393] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.394] FindNextFileW (in: hFindFile=0xaf91b8, lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="PUB60COR", cAlternateFileName="")) returned 1 [0122.394] GetProcessHeap () returned 0xae0000 [0122.394] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3440080 [0122.396] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9178 [0122.400] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.401] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2340, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00004_.GIF", cAlternateFileName="")) returned 1 [0122.401] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c30, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00011_.GIF", cAlternateFileName="")) returned 1 [0122.401] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a19, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00021_.GIF", cAlternateFileName="")) returned 1 [0122.401] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00037_.GIF", cAlternateFileName="")) returned 1 [0122.401] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb58a9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb58a9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00038_.GIF", cAlternateFileName="")) returned 1 [0122.402] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb58a9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00040_.GIF", cAlternateFileName="")) returned 1 [0122.402] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e06, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00052_.GIF", cAlternateFileName="")) returned 1 [0122.402] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e73, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00057_.GIF", cAlternateFileName="")) returned 1 [0122.402] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x205, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00090_.GIF", cAlternateFileName="")) returned 1 [0122.402] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00092_.GIF", cAlternateFileName="")) returned 1 [0122.402] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x319e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00103_.GIF", cAlternateFileName="")) returned 1 [0122.403] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00120_.GIF", cAlternateFileName="")) returned 1 [0122.403] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc44, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00126_.GIF", cAlternateFileName="")) returned 1 [0122.403] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00129_.GIF", cAlternateFileName="")) returned 1 [0122.403] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1485, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00130_.GIF", cAlternateFileName="")) returned 1 [0122.403] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00135_.GIF", cAlternateFileName="")) returned 1 [0122.404] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x296f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00139_.GIF", cAlternateFileName="")) returned 1 [0122.404] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3bcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00142_.GIF", cAlternateFileName="")) returned 1 [0122.404] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00154_.GIF", cAlternateFileName="")) returned 1 [0122.404] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00157_.GIF", cAlternateFileName="")) returned 1 [0122.404] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00158_.GIF", cAlternateFileName="")) returned 1 [0122.405] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00160_.GIF", cAlternateFileName="")) returned 1 [0122.405] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00161_.GIF", cAlternateFileName="")) returned 1 [0122.405] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b48, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00163_.GIF", cAlternateFileName="")) returned 1 [0122.405] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00164_.GIF", cAlternateFileName="")) returned 1 [0122.405] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2186, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00165_.GIF", cAlternateFileName="")) returned 1 [0122.405] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x131e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00167_.GIF", cAlternateFileName="")) returned 1 [0122.406] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00169_.GIF", cAlternateFileName="")) returned 1 [0122.406] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2420, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00170_.GIF", cAlternateFileName="")) returned 1 [0122.406] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1398, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00171_.GIF", cAlternateFileName="")) returned 1 [0122.406] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1126, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00172_.GIF", cAlternateFileName="")) returned 1 [0122.406] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00174_.GIF", cAlternateFileName="")) returned 1 [0122.407] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd32, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00175_.GIF", cAlternateFileName="")) returned 1 [0122.407] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc30, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00176_.GIF", cAlternateFileName="")) returned 1 [0122.407] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00010_.WMF", cAlternateFileName="")) returned 1 [0122.433] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00015_.WMF", cAlternateFileName="")) returned 1 [0122.434] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1634, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00790_.WMF", cAlternateFileName="")) returned 1 [0122.434] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5062, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00853_.WMF", cAlternateFileName="")) returned 1 [0122.434] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a50, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00914_.WMF", cAlternateFileName="")) returned 1 [0122.434] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x385c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00932_.WMF", cAlternateFileName="")) returned 1 [0122.435] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00965_.WMF", cAlternateFileName="")) returned 1 [0122.435] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd10, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01039_.WMF", cAlternateFileName="")) returned 1 [0122.435] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x63c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01044_.WMF", cAlternateFileName="")) returned 1 [0122.435] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01060_.WMF", cAlternateFileName="")) returned 1 [0122.435] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x728, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01084_.WMF", cAlternateFileName="")) returned 1 [0122.435] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x66dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01173_.WMF", cAlternateFileName="")) returned 1 [0122.436] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01174_.WMF", cAlternateFileName="")) returned 1 [0122.436] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01184_.WMF", cAlternateFileName="")) returned 1 [0122.436] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01216_.WMF", cAlternateFileName="")) returned 1 [0122.436] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01218_.WMF", cAlternateFileName="")) returned 1 [0122.436] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01251_.WMF", cAlternateFileName="")) returned 1 [0122.437] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ccc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01545_.WMF", cAlternateFileName="")) returned 1 [0122.437] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02122_.WMF", cAlternateFileName="")) returned 1 [0122.437] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02559_.WMF", cAlternateFileName="")) returned 1 [0122.437] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc89dc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x83c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02724_.WMF", cAlternateFileName="")) returned 1 [0122.437] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2418, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN03500_.WMF", cAlternateFileName="")) returned 1 [0122.438] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x928, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04108_.WMF", cAlternateFileName="")) returned 1 [0122.438] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04117_.WMF", cAlternateFileName="")) returned 1 [0122.438] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd58, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04134_.WMF", cAlternateFileName="")) returned 1 [0122.438] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04174_.WMF", cAlternateFileName="")) returned 1 [0122.438] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04191_.WMF", cAlternateFileName="")) returned 1 [0122.438] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1204, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04195_.WMF", cAlternateFileName="")) returned 1 [0122.439] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04196_.WMF", cAlternateFileName="")) returned 1 [0122.440] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04206_.WMF", cAlternateFileName="")) returned 1 [0122.440] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x212c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04225_.WMF", cAlternateFileName="")) returned 1 [0122.440] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04235_.WMF", cAlternateFileName="")) returned 1 [0122.440] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04267_.WMF", cAlternateFileName="")) returned 1 [0122.440] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04269_.WMF", cAlternateFileName="")) returned 1 [0122.441] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04323_.WMF", cAlternateFileName="")) returned 1 [0122.441] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd14, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04326_.WMF", cAlternateFileName="")) returned 1 [0122.441] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04332_.WMF", cAlternateFileName="")) returned 1 [0122.441] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04355_.WMF", cAlternateFileName="")) returned 1 [0122.442] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04369_.WMF", cAlternateFileName="")) returned 1 [0122.442] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1384, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04384_.WMF", cAlternateFileName="")) returned 1 [0122.442] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x138c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04385_.WMF", cAlternateFileName="")) returned 1 [0122.442] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BABY_01.MID", cAlternateFileName="")) returned 1 [0122.442] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1306, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00116_.WMF", cAlternateFileName="")) returned 1 [0122.442] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6906, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00141_.WMF", cAlternateFileName="")) returned 1 [0122.443] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7114, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00146_.WMF", cAlternateFileName="")) returned 1 [0122.443] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00155_.WMF", cAlternateFileName="")) returned 1 [0122.443] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x57f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00160_.WMF", cAlternateFileName="")) returned 1 [0122.443] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f34, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00173_.WMF", cAlternateFileName="")) returned 1 [0122.443] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4354, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD05119_.WMF", cAlternateFileName="")) returned 1 [0122.444] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ef0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD06102_.WMF", cAlternateFileName="")) returned 1 [0122.444] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4124, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD06200_.WMF", cAlternateFileName="")) returned 1 [0122.444] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x687c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07761_.WMF", cAlternateFileName="")) returned 1 [0122.444] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x133c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07804_.WMF", cAlternateFileName="")) returned 1 [0122.444] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07831_.WMF", cAlternateFileName="")) returned 1 [0122.445] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08758_.WMF", cAlternateFileName="")) returned 1 [0122.445] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08773_.WMF", cAlternateFileName="")) returned 1 [0122.445] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08808_.WMF", cAlternateFileName="")) returned 1 [0122.445] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08868_.WMF", cAlternateFileName="")) returned 1 [0122.445] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbaaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09031_.WMF", cAlternateFileName="")) returned 1 [0122.445] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09194_.WMF", cAlternateFileName="")) returned 1 [0122.446] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x504a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09662_.WMF", cAlternateFileName="")) returned 1 [0122.446] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09664_.WMF", cAlternateFileName="")) returned 1 [0122.446] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10890_.GIF", cAlternateFileName="")) returned 1 [0122.446] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4edd, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10972_.GIF", cAlternateFileName="")) returned 1 [0122.446] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19563_.GIF", cAlternateFileName="")) returned 1 [0122.447] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d75, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19582_.GIF", cAlternateFileName="")) returned 1 [0122.447] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19695_.WMF", cAlternateFileName="")) returned 1 [0122.447] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19827_.WMF", cAlternateFileName="")) returned 1 [0122.447] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2244, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19828_.WMF", cAlternateFileName="")) returned 1 [0122.448] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3896, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19986_.WMF", cAlternateFileName="")) returned 1 [0122.448] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4780, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19988_.WMF", cAlternateFileName="")) returned 1 [0122.448] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b32, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD20013_.WMF", cAlternateFileName="")) returned 1 [0122.448] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00008_.WMF", cAlternateFileName="")) returned 1 [0122.448] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x265a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00012_.WMF", cAlternateFileName="")) returned 1 [0122.448] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00045_.WMF", cAlternateFileName="")) returned 1 [0122.449] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00098_.WMF", cAlternateFileName="")) returned 1 [0122.449] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00105_.WMF", cAlternateFileName="")) returned 1 [0122.449] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00122_.WMF", cAlternateFileName="")) returned 1 [0122.449] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00130_.WMF", cAlternateFileName="")) returned 1 [0122.449] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00148_.WMF", cAlternateFileName="")) returned 1 [0122.450] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00152_.WMF", cAlternateFileName="")) returned 1 [0122.450] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf92, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00194_.WMF", cAlternateFileName="")) returned 1 [0122.450] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f86, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00195_.WMF", cAlternateFileName="")) returned 1 [0122.450] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2458, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00234_.WMF", cAlternateFileName="")) returned 1 [0122.450] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00242_.WMF", cAlternateFileName="")) returned 1 [0122.451] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x386c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00247_.WMF", cAlternateFileName="")) returned 1 [0122.451] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00248_.WMF", cAlternateFileName="")) returned 1 [0122.451] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1264, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00252_.WMF", cAlternateFileName="")) returned 1 [0122.451] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00254_.WMF", cAlternateFileName="")) returned 1 [0122.451] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00261_.WMF", cAlternateFileName="")) returned 1 [0122.451] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00262_.WMF", cAlternateFileName="")) returned 1 [0122.452] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1678, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00265_.WMF", cAlternateFileName="")) returned 1 [0122.452] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00267_.WMF", cAlternateFileName="")) returned 1 [0122.452] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1498, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00269_.WMF", cAlternateFileName="")) returned 1 [0122.452] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00270_.WMF", cAlternateFileName="")) returned 1 [0122.452] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00273_.WMF", cAlternateFileName="")) returned 1 [0122.453] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1044, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00274_.WMF", cAlternateFileName="")) returned 1 [0122.453] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00296_.WMF", cAlternateFileName="")) returned 1 [0122.453] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00390_.WMF", cAlternateFileName="")) returned 1 [0122.453] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00392_.WMF", cAlternateFileName="")) returned 1 [0122.453] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00524_.WMF", cAlternateFileName="")) returned 1 [0122.454] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2576, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00525_.WMF", cAlternateFileName="")) returned 1 [0122.454] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00526_.WMF", cAlternateFileName="")) returned 1 [0122.454] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00648_.WMF", cAlternateFileName="")) returned 1 [0122.660] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1138, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00921_.WMF", cAlternateFileName="")) returned 1 [0122.661] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1870, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00923_.WMF", cAlternateFileName="")) returned 1 [0122.661] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c14, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00932_.WMF", cAlternateFileName="")) returned 1 [0122.661] FindNextFileW (in: hFindFile=0xaf9178, lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00985_.WMF", cAlternateFileName="")) returned 1 [0122.692] GetProcessHeap () returned 0xae0000 [0122.692] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3440080 | out: hHeap=0xae0000) returned 1 [0122.692] GetProcessHeap () returned 0xae0000 [0122.692] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3440080 [0122.692] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9178 [0122.694] GetProcessHeap () returned 0xae0000 [0122.694] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0122.694] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\*", lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3486880 [0122.700] GetProcessHeap () returned 0xae0000 [0122.700] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0122.700] GetProcessHeap () returned 0xae0000 [0122.700] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3440080 | out: hHeap=0xae0000) returned 1 [0122.702] GetProcessHeap () returned 0xae0000 [0122.702] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3400060 | out: hHeap=0xae0000) returned 1 [0122.703] GetProcessHeap () returned 0xae0000 [0122.703] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3400060 [0122.703] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\*", lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9178 [0122.703] GetProcessHeap () returned 0xae0000 [0122.703] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3440080 [0122.994] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0123.083] GetProcessHeap () returned 0xae0000 [0123.083] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3440080 | out: hHeap=0xae0000) returned 1 [0123.083] GetProcessHeap () returned 0xae0000 [0123.083] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3440080 [0123.083] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0124.313] GetProcessHeap () returned 0xae0000 [0124.313] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3440080 | out: hHeap=0xae0000) returned 1 [0124.315] GetProcessHeap () returned 0xae0000 [0124.315] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3440080 [0124.315] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91b8 [0124.326] GetProcessHeap () returned 0xae0000 [0124.326] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3440080 | out: hHeap=0xae0000) returned 1 [0124.326] GetProcessHeap () returned 0xae0000 [0124.326] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3400060 | out: hHeap=0xae0000) returned 1 [0124.329] GetProcessHeap () returned 0xae0000 [0124.329] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3400060 [0124.330] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Flattener\\*", lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114f5747, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114f5747, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9178 [0124.337] GetProcessHeap () returned 0xae0000 [0124.337] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3400060 | out: hHeap=0xae0000) returned 1 [0124.337] GetProcessHeap () returned 0xae0000 [0124.337] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3400060 [0124.337] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\fre\\*", lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9178 [0124.344] GetProcessHeap () returned 0xae0000 [0124.344] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3400060 | out: hHeap=0xae0000) returned 1 [0124.344] GetProcessHeap () returned 0xae0000 [0124.344] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3400060 [0124.344] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Integration\\*", lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b2abe77, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b2abe77, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9178 [0124.358] GetProcessHeap () returned 0xae0000 [0124.358] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3400060 | out: hHeap=0xae0000) returned 1 [0124.358] GetProcessHeap () returned 0xae0000 [0124.358] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3400060 [0124.358] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Licenses16\\*", lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2687c83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee308135, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9178 [0126.270] GetProcessHeap () returned 0xae0000 [0126.270] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3400060 | out: hHeap=0xae0000) returned 1 [0126.272] GetProcessHeap () returned 0xae0000 [0126.272] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3400060 [0126.273] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\loc\\*", lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee45f66d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x983c2c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9178 [0126.274] GetProcessHeap () returned 0xae0000 [0126.274] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3400060 | out: hHeap=0xae0000) returned 1 [0126.274] GetProcessHeap () returned 0xae0000 [0126.274] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3400060 [0126.274] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\mcxml\\*", lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9178 [0126.277] GetProcessHeap () returned 0xae0000 [0126.760] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0126.763] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92201bc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3b8c7ea5, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b8c7ea5, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487208 [0126.778] GetProcessHeap () returned 0xae0000 [0126.778] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0126.778] GetProcessHeap () returned 0xae0000 [0126.778] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0126.778] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\mcxml\\es-es\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99dfc61, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99dfc61, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99dfc61, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487988 [0126.780] GetProcessHeap () returned 0xae0000 [0126.780] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0126.780] GetProcessHeap () returned 0xae0000 [0126.780] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0126.780] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\mcxml\\fr-fr\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99473dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99473dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99473dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487a88 [0126.782] GetProcessHeap () returned 0xae0000 [0126.782] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0126.782] GetProcessHeap () returned 0xae0000 [0126.782] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0126.782] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1164cbcb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487388 [0126.791] GetProcessHeap () returned 0xae0000 [0126.791] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0126.791] GetProcessHeap () returned 0xae0000 [0126.791] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3400060 | out: hHeap=0xae0000) returned 1 [0126.802] GetProcessHeap () returned 0xae0000 [0126.802] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3400060 [0126.803] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\*", lpFindFileData=0x2b6ef18 | out: lpFindFileData=0x2b6ef18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf9178 [0126.810] GetProcessHeap () returned 0xae0000 [0126.811] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0126.812] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b93a5c4, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b93a5c4, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487c48 [0127.195] GetProcessHeap () returned 0xae0000 [0127.195] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3460090 [0127.195] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\*", lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ac4a8a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ac4a8a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3488088 [0127.198] GetProcessHeap () returned 0xae0000 [0127.198] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3460090 | out: hHeap=0xae0000) returned 1 [0127.198] GetProcessHeap () returned 0xae0000 [0127.198] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3460090 [0127.198] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\*", lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1697068, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x99937c0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99937c0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487e08 [0127.205] GetProcessHeap () returned 0xae0000 [0127.205] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3460090 | out: hHeap=0xae0000) returned 1 [0127.251] GetProcessHeap () returned 0xae0000 [0127.251] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3460090 [0127.251] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\*", lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc7c11d2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3488008 [0127.298] GetProcessHeap () returned 0xae0000 [0127.298] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3460090 | out: hHeap=0xae0000) returned 1 [0127.298] GetProcessHeap () returned 0xae0000 [0127.298] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3460090 [0127.298] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\*", lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487b88 [0127.317] GetProcessHeap () returned 0xae0000 [0127.317] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3460090 | out: hHeap=0xae0000) returned 1 [0127.318] GetProcessHeap () returned 0xae0000 [0127.318] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3460090 [0127.318] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\*", lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487988 [0127.327] GetProcessHeap () returned 0xae0000 [0127.327] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3460090 | out: hHeap=0xae0000) returned 1 [0130.381] GetProcessHeap () returned 0xae0000 [0130.381] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0130.383] GetProcessHeap () returned 0xae0000 [0130.383] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0130.385] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1036\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d440f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d440f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d440f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487488 [0130.389] GetProcessHeap () returned 0xae0000 [0130.389] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0130.389] GetProcessHeap () returned 0xae0000 [0130.389] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0130.389] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\3082\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d440f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d440f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d440f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487548 [0130.390] GetProcessHeap () returned 0xae0000 [0130.390] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0130.390] GetProcessHeap () returned 0xae0000 [0130.390] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0130.390] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1295fc19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x12985c4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487f08 [0130.391] GetProcessHeap () returned 0xae0000 [0130.391] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0130.392] GetProcessHeap () returned 0xae0000 [0130.392] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0130.392] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1335b74d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1335b74d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91f8 [0130.919] GetProcessHeap () returned 0xae0000 [0130.919] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0130.921] GetProcessHeap () returned 0xae0000 [0130.921] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3440080 [0130.923] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\*", lpFindFileData=0x2b6ec88 | out: lpFindFileData=0x2b6ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc7c5a96a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xaf91f8 [0130.924] GetProcessHeap () returned 0xae0000 [0130.924] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0130.924] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\*", lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd42039, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd42039, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487e48 [0130.925] GetProcessHeap () returned 0xae0000 [0130.925] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3460090 [0130.925] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\*", lpFindFileData=0x2b6e768 | out: lpFindFileData=0x2b6e768*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x895576a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x895576a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487d88 [0130.927] GetProcessHeap () returned 0xae0000 [0130.927] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34890e8 [0130.928] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ar\\*", lpFindFileData=0x2b6e4d8 | out: lpFindFileData=0x2b6e4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487e08 [0130.933] GetProcessHeap () returned 0xae0000 [0130.933] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34890e8 | out: hHeap=0xae0000) returned 1 [0130.934] GetProcessHeap () returned 0xae0000 [0130.934] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34890e8 [0130.934] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bg\\*", lpFindFileData=0x2b6e4d8 | out: lpFindFileData=0x2b6e4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x18157e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18157e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487dc8 [0130.942] GetProcessHeap () returned 0xae0000 [0130.942] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34890e8 | out: hHeap=0xae0000) returned 1 [0130.942] GetProcessHeap () returned 0xae0000 [0130.942] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34890e8 [0130.943] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca\\*", lpFindFileData=0x2b6e4d8 | out: lpFindFileData=0x2b6e4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x61b241f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x61b241f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487ac8 [0131.383] GetProcessHeap () returned 0xae0000 [0131.422] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34890e8 | out: hHeap=0xae0000) returned 1 [0131.422] GetProcessHeap () returned 0xae0000 [0131.422] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34890e8 [0131.422] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cs\\*", lpFindFileData=0x2b6e4d8 | out: lpFindFileData=0x2b6e4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf134fca5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ee20e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ee20e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487b08 [0131.430] GetProcessHeap () returned 0xae0000 [0131.430] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34890e8 | out: hHeap=0xae0000) returned 1 [0131.430] GetProcessHeap () returned 0xae0000 [0131.431] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34890e8 [0131.431] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\da\\*", lpFindFileData=0x2b6e4d8 | out: lpFindFileData=0x2b6e4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c164a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6866e01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6866e01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3488048 [0131.447] GetProcessHeap () returned 0xae0000 [0131.447] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34890e8 | out: hHeap=0xae0000) returned 1 [0131.448] GetProcessHeap () returned 0xae0000 [0131.448] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34890e8 [0131.448] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\de\\*", lpFindFileData=0x2b6e4d8 | out: lpFindFileData=0x2b6e4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487a48 [0131.454] GetProcessHeap () returned 0xae0000 [0131.454] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34890e8 | out: hHeap=0xae0000) returned 1 [0131.454] GetProcessHeap () returned 0xae0000 [0131.454] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34890e8 [0131.454] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\el\\*", lpFindFileData=0x2b6e4d8 | out: lpFindFileData=0x2b6e4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487dc8 [0132.030] GetProcessHeap () returned 0xae0000 [0132.030] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34890e8 | out: hHeap=0xae0000) returned 1 [0132.030] GetProcessHeap () returned 0xae0000 [0132.031] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34890e8 [0132.031] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\es\\*", lpFindFileData=0x2b6e4d8 | out: lpFindFileData=0x2b6e4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487988 [0132.038] GetProcessHeap () returned 0xae0000 [0132.038] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34890e8 | out: hHeap=0xae0000) returned 1 [0132.038] GetProcessHeap () returned 0xae0000 [0132.038] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34890e8 [0132.038] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\et\\*", lpFindFileData=0x2b6e4d8 | out: lpFindFileData=0x2b6e4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8719376, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8719376, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487d08 [0132.043] GetProcessHeap () returned 0xae0000 [0132.043] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34890e8 | out: hHeap=0xae0000) returned 1 [0132.043] GetProcessHeap () returned 0xae0000 [0132.044] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34890e8 [0132.044] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\eu\\*", lpFindFileData=0x2b6e4d8 | out: lpFindFileData=0x2b6e4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x69980f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69980f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487ec8 [0132.065] GetProcessHeap () returned 0xae0000 [0132.065] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34890e8 | out: hHeap=0xae0000) returned 1 [0132.065] GetProcessHeap () returned 0xae0000 [0132.065] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34890e8 [0132.065] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fi\\*", lpFindFileData=0x2b6e4d8 | out: lpFindFileData=0x2b6e4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6bae279, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bae279, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487bc8 [0132.070] GetProcessHeap () returned 0xae0000 [0132.070] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34890e8 | out: hHeap=0xae0000) returned 1 [0132.070] GetProcessHeap () returned 0xae0000 [0132.070] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x34890e8 [0132.071] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fr\\*", lpFindFileData=0x2b6e4d8 | out: lpFindFileData=0x2b6e4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3488008 [0132.767] GetProcessHeap () returned 0xae0000 [0132.767] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x34890e8 | out: hHeap=0xae0000) returned 1 [0132.768] GetProcessHeap () returned 0xae0000 [0132.768] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3430078 [0132.768] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gl\\*", lpFindFileData=0x2b6e4d8 | out: lpFindFileData=0x2b6e4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e0a643, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x675bda6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x675bda6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487bc8 [0132.775] GetProcessHeap () returned 0xae0000 [0132.775] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3430078 | out: hHeap=0xae0000) returned 1 [0132.775] GetProcessHeap () returned 0xae0000 [0132.775] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3430078 [0132.775] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\he\\*", lpFindFileData=0x2b6e4d8 | out: lpFindFileData=0x2b6e4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c8cf9c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487dc8 [0132.783] GetProcessHeap () returned 0xae0000 [0132.783] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3430078 | out: hHeap=0xae0000) returned 1 [0132.783] GetProcessHeap () returned 0xae0000 [0132.783] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3430078 [0132.784] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hi\\*", lpFindFileData=0x2b6e4d8 | out: lpFindFileData=0x2b6e4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf43e3cb7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3488088 [0132.788] GetProcessHeap () returned 0xae0000 [0132.788] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3430078 | out: hHeap=0xae0000) returned 1 [0132.789] GetProcessHeap () returned 0xae0000 [0132.789] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3430078 [0132.789] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hr\\*", lpFindFileData=0x2b6e4d8 | out: lpFindFileData=0x2b6e4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3488088 [0132.795] GetProcessHeap () returned 0xae0000 [0132.795] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3430078 | out: hHeap=0xae0000) returned 1 [0132.795] GetProcessHeap () returned 0xae0000 [0132.795] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3430078 [0132.795] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hu\\*", lpFindFileData=0x2b6e4d8 | out: lpFindFileData=0x2b6e4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ebbef3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ebbef3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487d48 [0133.250] GetProcessHeap () returned 0xae0000 [0133.250] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3430078 | out: hHeap=0xae0000) returned 1 [0133.250] GetProcessHeap () returned 0xae0000 [0133.250] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3430078 [0133.250] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\id\\*", lpFindFileData=0x2b6e4d8 | out: lpFindFileData=0x2b6e4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc43098a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc43098a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487988 [0133.259] GetProcessHeap () returned 0xae0000 [0133.259] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3430078 | out: hHeap=0xae0000) returned 1 [0133.259] GetProcessHeap () returned 0xae0000 [0133.259] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3430078 [0133.259] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\it\\*", lpFindFileData=0x2b6e4d8 | out: lpFindFileData=0x2b6e4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa89f599, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6270fd0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6270fd0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487fc8 [0133.268] GetProcessHeap () returned 0xae0000 [0133.269] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3430078 | out: hHeap=0xae0000) returned 1 [0133.269] GetProcessHeap () returned 0xae0000 [0133.269] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3430078 [0133.269] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ja\\*", lpFindFileData=0x2b6e4d8 | out: lpFindFileData=0x2b6e4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x91adba5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91adba5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487ec8 [0133.274] GetProcessHeap () returned 0xae0000 [0133.274] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3430078 | out: hHeap=0xae0000) returned 1 [0133.274] GetProcessHeap () returned 0xae0000 [0133.274] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3430078 [0133.274] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kk\\*", lpFindFileData=0x2b6e4d8 | out: lpFindFileData=0x2b6e4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd09866, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6d2b978, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d2b978, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487a88 [0133.281] GetProcessHeap () returned 0xae0000 [0133.281] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3430078 | out: hHeap=0xae0000) returned 1 [0133.281] GetProcessHeap () returned 0xae0000 [0133.281] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3430078 [0133.281] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ko\\*", lpFindFileData=0x2b6e4d8 | out: lpFindFileData=0x2b6e4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x5101cbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487ec8 [0133.286] GetProcessHeap () returned 0xae0000 [0133.286] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3430078 | out: hHeap=0xae0000) returned 1 [0133.286] GetProcessHeap () returned 0xae0000 [0133.286] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3430078 [0133.286] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lt\\*", lpFindFileData=0x2b6e4d8 | out: lpFindFileData=0x2b6e4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6bad1cb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x22f6470, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34879c8 [0133.291] GetProcessHeap () returned 0xae0000 [0133.291] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3430078 | out: hHeap=0xae0000) returned 1 [0133.291] GetProcessHeap () returned 0xae0000 [0133.291] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3430078 [0133.291] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lv\\*", lpFindFileData=0x2b6e4d8 | out: lpFindFileData=0x2b6e4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x59f29de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59f29de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487988 [0133.642] GetProcessHeap () returned 0xae0000 [0133.642] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3430078 | out: hHeap=0xae0000) returned 1 [0133.642] GetProcessHeap () returned 0xae0000 [0133.642] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3430078 [0133.643] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ms\\*", lpFindFileData=0x2b6e4d8 | out: lpFindFileData=0x2b6e4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487988 [0133.647] GetProcessHeap () returned 0xae0000 [0133.647] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3430078 | out: hHeap=0xae0000) returned 1 [0133.648] GetProcessHeap () returned 0xae0000 [0133.648] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3430078 [0133.648] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nl\\*", lpFindFileData=0x2b6e4d8 | out: lpFindFileData=0x2b6e4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0822be8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487a88 [0133.653] GetProcessHeap () returned 0xae0000 [0133.653] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3430078 | out: hHeap=0xae0000) returned 1 [0133.653] GetProcessHeap () returned 0xae0000 [0133.653] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3430078 [0133.653] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\no\\*", lpFindFileData=0x2b6e4d8 | out: lpFindFileData=0x2b6e4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4409f1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8680a1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487d48 [0133.658] GetProcessHeap () returned 0xae0000 [0133.658] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3430078 | out: hHeap=0xae0000) returned 1 [0133.658] GetProcessHeap () returned 0xae0000 [0133.658] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3430078 [0133.658] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pl\\*", lpFindFileData=0x2b6e4d8 | out: lpFindFileData=0x2b6e4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf854e731, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487a88 [0133.662] GetProcessHeap () returned 0xae0000 [0133.663] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3430078 | out: hHeap=0xae0000) returned 1 [0133.663] GetProcessHeap () returned 0xae0000 [0133.663] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3430078 [0133.663] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-BR\\*", lpFindFileData=0x2b6e4d8 | out: lpFindFileData=0x2b6e4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf755cb7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6bfa6d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bfa6d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487a88 [0133.671] GetProcessHeap () returned 0xae0000 [0133.671] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3430078 | out: hHeap=0xae0000) returned 1 [0133.671] GetProcessHeap () returned 0xae0000 [0133.671] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3430078 [0133.671] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-pt\\*", lpFindFileData=0x2b6e4d8 | out: lpFindFileData=0x2b6e4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487988 [0134.013] GetProcessHeap () returned 0xae0000 [0134.013] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3430078 | out: hHeap=0xae0000) returned 1 [0134.014] GetProcessHeap () returned 0xae0000 [0134.014] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3430078 [0134.014] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ro\\*", lpFindFileData=0x2b6e4d8 | out: lpFindFileData=0x2b6e4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487ec8 [0134.019] GetProcessHeap () returned 0xae0000 [0134.019] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3430078 | out: hHeap=0xae0000) returned 1 [0134.019] GetProcessHeap () returned 0xae0000 [0134.019] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3430078 [0134.019] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ru\\*", lpFindFileData=0x2b6e4d8 | out: lpFindFileData=0x2b6e4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf13037fa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf71003, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf71003, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487dc8 [0134.024] GetProcessHeap () returned 0xae0000 [0134.024] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3430078 | out: hHeap=0xae0000) returned 1 [0134.024] GetProcessHeap () returned 0xae0000 [0134.024] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3430078 [0134.024] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sk\\*", lpFindFileData=0x2b6e4d8 | out: lpFindFileData=0x2b6e4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487a08 [0134.032] GetProcessHeap () returned 0xae0000 [0134.032] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3430078 | out: hHeap=0xae0000) returned 1 [0134.033] GetProcessHeap () returned 0xae0000 [0134.033] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3430078 [0134.033] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sl\\*", lpFindFileData=0x2b6e4d8 | out: lpFindFileData=0x2b6e4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487a88 [0134.038] GetProcessHeap () returned 0xae0000 [0134.038] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3430078 | out: hHeap=0xae0000) returned 1 [0134.038] GetProcessHeap () returned 0xae0000 [0134.038] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3430078 [0134.038] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl\\*", lpFindFileData=0x2b6e4d8 | out: lpFindFileData=0x2b6e4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf05741b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x4cd5a2f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4cd5a2f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487c48 [0134.045] GetProcessHeap () returned 0xae0000 [0134.046] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3430078 | out: hHeap=0xae0000) returned 1 [0134.046] GetProcessHeap () returned 0xae0000 [0134.046] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3430078 [0134.046] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn\\*", lpFindFileData=0x2b6e4d8 | out: lpFindFileData=0x2b6e4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6aee686, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6d05722, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d05722, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487a48 [0134.051] GetProcessHeap () returned 0xae0000 [0134.051] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3430078 | out: hHeap=0xae0000) returned 1 [0134.051] GetProcessHeap () returned 0xae0000 [0134.051] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3430078 [0134.051] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn-CS\\*", lpFindFileData=0x2b6e4d8 | out: lpFindFileData=0x2b6e4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487bc8 [0134.288] GetProcessHeap () returned 0xae0000 [0134.288] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3430078 | out: hHeap=0xae0000) returned 1 [0134.288] GetProcessHeap () returned 0xae0000 [0134.289] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3430078 [0134.289] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sv\\*", lpFindFileData=0x2b6e4d8 | out: lpFindFileData=0x2b6e4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa25d2ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x670f8d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x670f8d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487a48 [0134.294] GetProcessHeap () returned 0xae0000 [0134.295] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3430078 | out: hHeap=0xae0000) returned 1 [0134.295] GetProcessHeap () returned 0xae0000 [0134.295] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3430078 [0134.295] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\th\\*", lpFindFileData=0x2b6e4d8 | out: lpFindFileData=0x2b6e4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1860d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487d08 [0134.296] GetProcessHeap () returned 0xae0000 [0134.296] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3430078 | out: hHeap=0xae0000) returned 1 [0134.296] GetProcessHeap () returned 0xae0000 [0134.296] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3430078 [0134.296] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tr\\*", lpFindFileData=0x2b6e4d8 | out: lpFindFileData=0x2b6e4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x453c2a7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x453c2a7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487988 [0134.301] GetProcessHeap () returned 0xae0000 [0134.301] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3430078 | out: hHeap=0xae0000) returned 1 [0134.301] GetProcessHeap () returned 0xae0000 [0134.301] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3430078 [0134.301] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uk\\*", lpFindFileData=0x2b6e4d8 | out: lpFindFileData=0x2b6e4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x37f90ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37f90ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487f48 [0134.311] GetProcessHeap () returned 0xae0000 [0134.311] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3430078 | out: hHeap=0xae0000) returned 1 [0134.311] GetProcessHeap () returned 0xae0000 [0134.311] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3430078 [0134.311] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\vi\\*", lpFindFileData=0x2b6e4d8 | out: lpFindFileData=0x2b6e4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4692737, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x4abf9f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4abf9f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487dc8 [0134.316] GetProcessHeap () returned 0xae0000 [0134.316] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3430078 | out: hHeap=0xae0000) returned 1 [0134.316] GetProcessHeap () returned 0xae0000 [0134.316] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3430078 [0134.316] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANS\\*", lpFindFileData=0x2b6e4d8 | out: lpFindFileData=0x2b6e4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x680214, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x680214, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487d48 [0134.321] GetProcessHeap () returned 0xae0000 [0134.321] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3430078 | out: hHeap=0xae0000) returned 1 [0134.321] GetProcessHeap () returned 0xae0000 [0134.321] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3430078 [0134.321] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANT\\*", lpFindFileData=0x2b6e4d8 | out: lpFindFileData=0x2b6e4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00af60a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5581c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa5581c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487b08 [0134.762] GetProcessHeap () returned 0xae0000 [0134.763] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3430078 | out: hHeap=0xae0000) returned 1 [0134.763] GetProcessHeap () returned 0xae0000 [0134.763] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3460090 | out: hHeap=0xae0000) returned 1 [0134.765] GetProcessHeap () returned 0xae0000 [0134.765] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0134.766] GetProcessHeap () returned 0xae0000 [0134.766] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3430078 [0134.766] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power Map Excel Add-in\\*", lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf016e209, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3488008 [0134.771] GetProcessHeap () returned 0xae0000 [0134.771] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3430078 | out: hHeap=0xae0000) returned 1 [0134.771] GetProcessHeap () returned 0xae0000 [0134.771] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3430078 [0134.772] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\*", lpFindFileData=0x2b6e9f8 | out: lpFindFileData=0x2b6e9f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487e08 [0134.772] GetProcessHeap () returned 0xae0000 [0134.772] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0134.772] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ar\\*", lpFindFileData=0x2b6e768 | out: lpFindFileData=0x2b6e768*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487988 [0134.781] GetProcessHeap () returned 0xae0000 [0134.781] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0134.781] GetProcessHeap () returned 0xae0000 [0134.781] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0134.781] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\bg\\*", lpFindFileData=0x2b6e768 | out: lpFindFileData=0x2b6e768*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487ac8 [0134.786] GetProcessHeap () returned 0xae0000 [0134.786] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0134.786] GetProcessHeap () returned 0xae0000 [0134.786] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0134.786] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ca\\*", lpFindFileData=0x2b6e768 | out: lpFindFileData=0x2b6e768*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42d8c51, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487dc8 [0134.791] GetProcessHeap () returned 0xae0000 [0134.791] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0134.791] GetProcessHeap () returned 0xae0000 [0134.791] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0134.791] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\cs\\*", lpFindFileData=0x2b6e768 | out: lpFindFileData=0x2b6e768*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9a9d821, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3488088 [0135.132] GetProcessHeap () returned 0xae0000 [0135.132] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0135.132] GetProcessHeap () returned 0xae0000 [0135.132] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0135.132] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\*", lpFindFileData=0x2b6e768 | out: lpFindFileData=0x2b6e768*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a6473, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487ac8 [0135.143] GetProcessHeap () returned 0xae0000 [0135.144] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0135.144] GetProcessHeap () returned 0xae0000 [0135.144] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0135.144] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\de\\*", lpFindFileData=0x2b6e768 | out: lpFindFileData=0x2b6e768*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487ec8 [0135.148] GetProcessHeap () returned 0xae0000 [0135.148] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0135.149] GetProcessHeap () returned 0xae0000 [0135.149] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0135.149] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\el\\*", lpFindFileData=0x2b6e768 | out: lpFindFileData=0x2b6e768*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf46b8986, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34879c8 [0135.154] GetProcessHeap () returned 0xae0000 [0135.154] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0135.154] GetProcessHeap () returned 0xae0000 [0135.155] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0135.155] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\es\\*", lpFindFileData=0x2b6e768 | out: lpFindFileData=0x2b6e768*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7582db3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487ec8 [0135.161] GetProcessHeap () returned 0xae0000 [0135.161] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0135.161] GetProcessHeap () returned 0xae0000 [0135.161] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0135.161] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\*", lpFindFileData=0x2b6e768 | out: lpFindFileData=0x2b6e768*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b0f72e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487cc8 [0135.541] GetProcessHeap () returned 0xae0000 [0135.541] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0135.543] GetProcessHeap () returned 0xae0000 [0135.543] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0135.544] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\eu\\*", lpFindFileData=0x2b6e768 | out: lpFindFileData=0x2b6e768*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6d2a978, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34879c8 [0135.550] GetProcessHeap () returned 0xae0000 [0135.550] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0135.550] GetProcessHeap () returned 0xae0000 [0135.550] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0135.550] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fi\\*", lpFindFileData=0x2b6e768 | out: lpFindFileData=0x2b6e768*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x138defa8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x138defa8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487e88 [0135.555] GetProcessHeap () returned 0xae0000 [0135.556] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0135.557] GetProcessHeap () returned 0xae0000 [0135.557] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0135.557] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fr\\*", lpFindFileData=0x2b6e768 | out: lpFindFileData=0x2b6e768*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487e48 [0135.562] GetProcessHeap () returned 0xae0000 [0135.562] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0135.562] GetProcessHeap () returned 0xae0000 [0135.562] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0135.562] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\gl\\*", lpFindFileData=0x2b6e768 | out: lpFindFileData=0x2b6e768*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ac3a61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13aced2b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13aced2b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487ac8 [0135.569] GetProcessHeap () returned 0xae0000 [0135.569] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0135.569] GetProcessHeap () returned 0xae0000 [0135.569] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0135.569] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\he\\*", lpFindFileData=0x2b6e768 | out: lpFindFileData=0x2b6e768*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a98712, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13a8299e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13a8299e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487b48 [0135.575] GetProcessHeap () returned 0xae0000 [0135.575] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0135.575] GetProcessHeap () returned 0xae0000 [0135.575] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0135.575] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hi\\*", lpFindFileData=0x2b6e768 | out: lpFindFileData=0x2b6e768*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa806c3d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1428e945, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1428e945, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487c08 [0135.580] GetProcessHeap () returned 0xae0000 [0135.580] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0135.580] GetProcessHeap () returned 0xae0000 [0135.580] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0135.580] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hr\\*", lpFindFileData=0x2b6e768 | out: lpFindFileData=0x2b6e768*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13b67741, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13b67741, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487c88 [0135.585] GetProcessHeap () returned 0xae0000 [0135.585] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0135.585] GetProcessHeap () returned 0xae0000 [0135.585] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0135.586] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\*", lpFindFileData=0x2b6e768 | out: lpFindFileData=0x2b6e768*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6164f96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14648313, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14648313, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487b08 [0136.216] GetProcessHeap () returned 0xae0000 [0136.216] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0136.216] GetProcessHeap () returned 0xae0000 [0136.216] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0136.216] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\id\\*", lpFindFileData=0x2b6e768 | out: lpFindFileData=0x2b6e768*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1434d390, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1434d390, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487a48 [0136.221] GetProcessHeap () returned 0xae0000 [0136.221] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0136.221] GetProcessHeap () returned 0xae0000 [0136.221] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0136.221] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\it\\*", lpFindFileData=0x2b6e768 | out: lpFindFileData=0x2b6e768*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf964b3dd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14969496, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14969496, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487a08 [0136.226] GetProcessHeap () returned 0xae0000 [0136.226] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0136.226] GetProcessHeap () returned 0xae0000 [0136.226] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0136.226] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ja\\*", lpFindFileData=0x2b6e768 | out: lpFindFileData=0x2b6e768*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x146e0bdc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x146e0bdc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487988 [0136.231] GetProcessHeap () returned 0xae0000 [0136.231] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0136.231] GetProcessHeap () returned 0xae0000 [0136.232] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0136.232] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\kk\\*", lpFindFileData=0x2b6e768 | out: lpFindFileData=0x2b6e768*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfae6f174, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14b330aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14b330aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487a48 [0136.236] GetProcessHeap () returned 0xae0000 [0136.236] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0136.237] GetProcessHeap () returned 0xae0000 [0136.237] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0136.237] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ko\\*", lpFindFileData=0x2b6e768 | out: lpFindFileData=0x2b6e768*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14ac0994, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14ac0994, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487908 [0136.241] GetProcessHeap () returned 0xae0000 [0136.241] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0136.241] GetProcessHeap () returned 0xae0000 [0136.241] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0136.242] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lt\\*", lpFindFileData=0x2b6e768 | out: lpFindFileData=0x2b6e768*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7b529d9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x152a6704, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x152a6704, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487b48 [0136.248] GetProcessHeap () returned 0xae0000 [0136.248] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0136.248] GetProcessHeap () returned 0xae0000 [0136.248] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0136.248] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lv\\*", lpFindFileData=0x2b6e768 | out: lpFindFileData=0x2b6e768*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf035e09d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487ec8 [0136.253] GetProcessHeap () returned 0xae0000 [0136.253] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0136.253] GetProcessHeap () returned 0xae0000 [0136.253] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0136.253] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ms\\*", lpFindFileData=0x2b6e768 | out: lpFindFileData=0x2b6e768*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42fef17, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15ab259c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ab259c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487dc8 [0136.258] GetProcessHeap () returned 0xae0000 [0136.258] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0136.258] GetProcessHeap () returned 0xae0000 [0136.258] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0136.258] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\nl\\*", lpFindFileData=0x2b6e768 | out: lpFindFileData=0x2b6e768*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x718b80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15a3fea8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15a3fea8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487f48 [0136.576] GetProcessHeap () returned 0xae0000 [0136.576] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0136.576] GetProcessHeap () returned 0xae0000 [0136.576] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0136.576] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\no\\*", lpFindFileData=0x2b6e768 | out: lpFindFileData=0x2b6e768*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15b71118, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b71118, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487c08 [0136.582] GetProcessHeap () returned 0xae0000 [0136.582] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0136.582] GetProcessHeap () returned 0xae0000 [0136.582] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0136.583] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pl\\*", lpFindFileData=0x2b6e768 | out: lpFindFileData=0x2b6e768*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf44c8b33, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15b24c93, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b24c93, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487bc8 [0136.588] GetProcessHeap () returned 0xae0000 [0136.588] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0136.588] GetProcessHeap () returned 0xae0000 [0136.588] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0136.588] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt\\*", lpFindFileData=0x2b6e768 | out: lpFindFileData=0x2b6e768*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15bbd5ad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15bbd5ad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487988 [0136.594] GetProcessHeap () returned 0xae0000 [0136.594] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0136.594] GetProcessHeap () returned 0xae0000 [0136.594] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0136.594] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt-PT\\*", lpFindFileData=0x2b6e768 | out: lpFindFileData=0x2b6e768*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf475131d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15be380c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15be380c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3488008 [0136.599] GetProcessHeap () returned 0xae0000 [0136.599] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0136.599] GetProcessHeap () returned 0xae0000 [0136.600] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0136.600] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ro\\*", lpFindFileData=0x2b6e768 | out: lpFindFileData=0x2b6e768*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6ac83cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15d3adab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d3adab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487bc8 [0136.601] GetProcessHeap () returned 0xae0000 [0136.601] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0136.601] GetProcessHeap () returned 0xae0000 [0136.601] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0136.601] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ru\\*", lpFindFileData=0x2b6e768 | out: lpFindFileData=0x2b6e768*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15d14b21, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d14b21, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487fc8 [0136.606] GetProcessHeap () returned 0xae0000 [0136.606] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0136.606] GetProcessHeap () returned 0xae0000 [0136.606] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0136.606] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sk\\*", lpFindFileData=0x2b6e768 | out: lpFindFileData=0x2b6e768*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6c6bda4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15e92299, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e92299, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487c08 [0136.611] GetProcessHeap () returned 0xae0000 [0136.611] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0136.611] GetProcessHeap () returned 0xae0000 [0136.611] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0136.611] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sl\\*", lpFindFileData=0x2b6e768 | out: lpFindFileData=0x2b6e768*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b359a5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15e45dad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e45dad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487dc8 [0136.968] GetProcessHeap () returned 0xae0000 [0136.968] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0136.968] GetProcessHeap () returned 0xae0000 [0136.968] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0136.968] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-cyrl\\*", lpFindFileData=0x2b6e768 | out: lpFindFileData=0x2b6e768*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15f04999, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15f04999, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487a88 [0136.969] GetProcessHeap () returned 0xae0000 [0136.969] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0136.969] GetProcessHeap () returned 0xae0000 [0136.969] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0136.970] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-latn\\*", lpFindFileData=0x2b6e768 | out: lpFindFileData=0x2b6e768*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa879350, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x160a83ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x160a83ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487fc8 [0136.975] GetProcessHeap () returned 0xae0000 [0136.975] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0136.976] GetProcessHeap () returned 0xae0000 [0136.976] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0136.976] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-Latn-CS\\*", lpFindFileData=0x2b6e768 | out: lpFindFileData=0x2b6e768*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf45f9db0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15ede724, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ede724, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3488088 [0136.981] GetProcessHeap () returned 0xae0000 [0136.981] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0136.981] GetProcessHeap () returned 0xae0000 [0136.982] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0136.982] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sv\\*", lpFindFileData=0x2b6e768 | out: lpFindFileData=0x2b6e768*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16035c5a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16035c5a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487f48 [0136.988] GetProcessHeap () returned 0xae0000 [0136.989] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0136.989] GetProcessHeap () returned 0xae0000 [0136.989] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0136.989] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\th\\*", lpFindFileData=0x2b6e768 | out: lpFindFileData=0x2b6e768*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c66c57, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16166f59, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16166f59, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3487e48 [0136.996] GetProcessHeap () returned 0xae0000 [0136.996] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0x3450088 | out: hHeap=0xae0000) returned 1 [0136.996] GetProcessHeap () returned 0xae0000 [0136.996] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x3450088 [0136.996] FindFirstFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\*", lpFindFileData=0x2b6e768) Thread: id = 23 os_tid = 0x6ac [0113.011] GetProcessHeap () returned 0xae0000 [0113.012] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0xb849b8 [0113.012] GetProcessHeap () returned 0xae0000 [0113.012] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0xb949c0 [0113.013] GetProcessHeap () returned 0xae0000 [0113.013] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x28) returned 0xb526c0 [0113.013] GetProcessHeap () returned 0xae0000 [0113.013] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x110102) returned 0x3071020 [0113.021] GetProcessHeap () returned 0xae0000 [0113.021] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x50) returned 0xb09810 [0113.021] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75e90000 [0113.022] GetProcAddress (hModule=0x75e90000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75ea6b30 [0113.022] Wow64DisableWow64FsRedirection (in: OldValue=0x2cafca8 | out: OldValue=0x2cafca8*=0x0) returned 1 [0113.022] GetProcessHeap () returned 0xae0000 [0113.022] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb09810 | out: hHeap=0xae0000) returned 1 [0113.022] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0113.028] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x2cafc50 | out: lpFileSize=0x2cafc50*=42674) returned 1 [0113.028] CloseHandle (hObject=0x2f0) returned 1 [0113.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log")) returned 0x20 [0113.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log")) returned 0x20 [0113.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0113.029] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0113.029] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0113.029] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0113.029] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2f4 [0113.030] ReadFile (in: hFile=0x2f0, lpBuffer=0x3071020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2cafc2c, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesRead=0x2cafc2c*=0xa6b2, lpOverlapped=0x0) returned 1 [0113.407] WriteFile (in: hFile=0x2f4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0xa6c0, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0xa6c0, lpOverlapped=0x0) returned 1 [0113.412] WriteFile (in: hFile=0x2f4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x122, lpOverlapped=0x0) returned 1 [0113.413] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0113.413] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0113.413] WriteFile (in: hFile=0x2f0, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0xa6b2, lpNumberOfBytesWritten=0x2caf984, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2caf984*=0xa6b2, lpOverlapped=0x0) returned 1 [0113.414] FlushFileBuffers (hFile=0x2f0) returned 1 [0113.661] FlushFileBuffers (hFile=0x2f4) returned 1 [0113.668] CloseHandle (hObject=0x2f0) returned 1 [0113.671] CloseHandle (hObject=0x2f4) returned 1 [0113.674] DeleteFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log")) returned 1 [0113.678] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0113.678] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x2cafc50 | out: lpFileSize=0x2cafc50*=40) returned 1 [0113.678] CloseHandle (hObject=0x2f4) returned 1 [0113.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log")) returned 0x20 [0113.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log")) returned 0x20 [0113.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0113.679] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0113.679] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0113.679] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0113.680] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2f0 [0113.680] ReadFile (in: hFile=0x2f4, lpBuffer=0x3071020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2cafc2c, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesRead=0x2cafc2c*=0x28, lpOverlapped=0x0) returned 1 [0113.683] WriteFile (in: hFile=0x2f0, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x30, lpOverlapped=0x0) returned 1 [0113.686] WriteFile (in: hFile=0x2f0, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x112, lpOverlapped=0x0) returned 1 [0113.686] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0113.686] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0113.687] WriteFile (in: hFile=0x2f4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x2caf984, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2caf984*=0x28, lpOverlapped=0x0) returned 1 [0113.687] FlushFileBuffers (hFile=0x2f4) returned 1 [0113.699] FlushFileBuffers (hFile=0x2f0) returned 1 [0113.704] CloseHandle (hObject=0x2f4) returned 1 [0113.705] CloseHandle (hObject=0x2f0) returned 1 [0113.707] DeleteFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log")) returned 1 [0113.710] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0113.718] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x2cafc50 | out: lpFileSize=0x2cafc50*=144072) returned 1 [0113.718] CloseHandle (hObject=0x2f0) returned 1 [0113.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll")) returned 0x20 [0113.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll")) returned 0x20 [0113.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0113.719] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0113.719] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0113.719] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0113.719] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2f4 [0113.720] ReadFile (in: hFile=0x2f0, lpBuffer=0x3071020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2cafc2c, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesRead=0x2cafc2c*=0x232c8, lpOverlapped=0x0) returned 1 [0113.781] WriteFile (in: hFile=0x2f4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x232d0, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x232d0, lpOverlapped=0x0) returned 1 [0113.790] WriteFile (in: hFile=0x2f4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x102, lpOverlapped=0x0) returned 1 [0113.791] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0113.791] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0113.791] WriteFile (in: hFile=0x2f0, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x232c8, lpNumberOfBytesWritten=0x2caf984, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2caf984*=0x232c8, lpOverlapped=0x0) returned 1 [0113.793] FlushFileBuffers (hFile=0x2f0) returned 1 [0114.475] FlushFileBuffers (hFile=0x2f4) returned 1 [0114.484] CloseHandle (hObject=0x2f0) returned 1 [0114.491] CloseHandle (hObject=0x2f4) returned 1 [0114.499] DeleteFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll")) returned 1 [0114.504] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0114.507] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x2cafc50 | out: lpFileSize=0x2cafc50*=74) returned 1 [0114.507] CloseHandle (hObject=0x2f4) returned 1 [0114.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd")) returned 0x20 [0114.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd")) returned 0x20 [0114.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\preoobe.cmd.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0114.508] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0114.508] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0114.508] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0114.508] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\preoobe.cmd.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2f0 [0114.508] ReadFile (in: hFile=0x2f4, lpBuffer=0x3071020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2cafc2c, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesRead=0x2cafc2c*=0x4a, lpOverlapped=0x0) returned 1 [0114.513] WriteFile (in: hFile=0x2f0, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x50, lpOverlapped=0x0) returned 1 [0114.515] WriteFile (in: hFile=0x2f0, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0xf2, lpOverlapped=0x0) returned 1 [0114.516] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0114.516] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0114.516] WriteFile (in: hFile=0x2f4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x4a, lpNumberOfBytesWritten=0x2caf984, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2caf984*=0x4a, lpOverlapped=0x0) returned 1 [0114.516] FlushFileBuffers (hFile=0x2f4) returned 1 [0114.538] FlushFileBuffers (hFile=0x2f0) returned 1 [0114.562] CloseHandle (hObject=0x2f4) returned 1 [0114.564] CloseHandle (hObject=0x2f0) returned 1 [0114.568] DeleteFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd")) returned 1 [0114.573] CreateFileW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0114.574] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x2cafc50 | out: lpFileSize=0x2cafc50*=129) returned 1 [0114.574] CloseHandle (hObject=0x2f0) returned 1 [0114.574] GetFileAttributesW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini")) returned 0x26 [0114.574] GetFileAttributesW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini")) returned 0x26 [0114.574] GetFileAttributesW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0114.574] CreateFileW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0114.574] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0114.575] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0114.575] CreateFileW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x26, hTemplateFile=0x0) returned 0x2f4 [0114.577] ReadFile (in: hFile=0x2f0, lpBuffer=0x3071020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2cafc2c, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesRead=0x2cafc2c*=0x81, lpOverlapped=0x0) returned 1 [0114.580] WriteFile (in: hFile=0x2f4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x90, lpOverlapped=0x0) returned 1 [0114.583] WriteFile (in: hFile=0x2f4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0xf2, lpOverlapped=0x0) returned 1 [0114.584] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0114.584] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0114.584] WriteFile (in: hFile=0x2f0, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x81, lpNumberOfBytesWritten=0x2caf984, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2caf984*=0x81, lpOverlapped=0x0) returned 1 [0114.584] FlushFileBuffers (hFile=0x2f0) returned 1 [0114.591] FlushFileBuffers (hFile=0x2f4) returned 1 [0114.597] CloseHandle (hObject=0x2f0) returned 1 [0114.598] CloseHandle (hObject=0x2f4) returned 1 [0114.599] DeleteFileW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini")) returned 1 [0114.602] CreateFileW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0114.603] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x2cafc50 | out: lpFileSize=0x2cafc50*=129) returned 1 [0114.603] CloseHandle (hObject=0x2f4) returned 1 [0114.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini")) returned 0x26 [0114.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini")) returned 0x26 [0114.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0114.604] CreateFileW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0114.604] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0114.604] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0114.604] CreateFileW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x26, hTemplateFile=0x0) returned 0x2f0 [0114.605] ReadFile (in: hFile=0x2f4, lpBuffer=0x3071020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2cafc2c, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesRead=0x2cafc2c*=0x81, lpOverlapped=0x0) returned 1 [0114.607] WriteFile (in: hFile=0x2f0, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x90, lpOverlapped=0x0) returned 1 [0114.610] WriteFile (in: hFile=0x2f0, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0xf2, lpOverlapped=0x0) returned 1 [0114.610] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0114.610] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0114.610] WriteFile (in: hFile=0x2f4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x81, lpNumberOfBytesWritten=0x2caf984, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2caf984*=0x81, lpOverlapped=0x0) returned 1 [0114.611] FlushFileBuffers (hFile=0x2f4) returned 1 [0114.617] FlushFileBuffers (hFile=0x2f0) returned 1 [0114.623] CloseHandle (hObject=0x2f4) returned 1 [0114.623] CloseHandle (hObject=0x2f0) returned 1 [0114.625] DeleteFileW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini")) returned 1 [0114.628] CreateFileW (lpFileName="\\\\?\\C:\\$WINRE_BACKUP_PARTITION.MARKER" (normalized: "c:\\$winre_backup_partition.marker"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0114.630] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x2cafc50 | out: lpFileSize=0x2cafc50*=0) returned 1 [0114.630] CloseHandle (hObject=0x2f0) returned 1 [0114.631] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0114.632] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x2cafc50 | out: lpFileSize=0x2cafc50*=7567) returned 1 [0114.632] CloseHandle (hObject=0x2f0) returned 1 [0114.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf")) returned 0x80 [0114.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf")) returned 0x80 [0114.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\eula.rtf.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0114.633] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0114.633] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0114.633] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0114.634] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\eula.rtf.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f4 [0114.638] ReadFile (in: hFile=0x2f0, lpBuffer=0x3071020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2cafc2c, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesRead=0x2cafc2c*=0x1d8f, lpOverlapped=0x0) returned 1 [0114.643] WriteFile (in: hFile=0x2f4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x1d90, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x1d90, lpOverlapped=0x0) returned 1 [0114.646] WriteFile (in: hFile=0x2f4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0xf2, lpOverlapped=0x0) returned 1 [0114.646] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0114.646] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0114.646] WriteFile (in: hFile=0x2f0, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x1d8f, lpNumberOfBytesWritten=0x2caf984, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2caf984*=0x1d8f, lpOverlapped=0x0) returned 1 [0114.647] FlushFileBuffers (hFile=0x2f0) returned 1 [0114.661] FlushFileBuffers (hFile=0x2f4) returned 1 [0114.665] CloseHandle (hObject=0x2f0) returned 1 [0114.668] CloseHandle (hObject=0x2f4) returned 1 [0114.669] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf")) returned 1 [0114.672] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0114.673] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x2cafc50 | out: lpFileSize=0x2cafc50*=74214) returned 1 [0114.673] CloseHandle (hObject=0x2f4) returned 1 [0114.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml")) returned 0x80 [0114.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml")) returned 0x80 [0114.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\LocalizedData.xml.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0114.674] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0114.674] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0114.674] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0114.674] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\LocalizedData.xml.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f0 [0114.675] ReadFile (in: hFile=0x2f4, lpBuffer=0x3071020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2cafc2c, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesRead=0x2cafc2c*=0x121e6, lpOverlapped=0x0) returned 1 [0114.681] WriteFile (in: hFile=0x2f0, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x121f0, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x121f0, lpOverlapped=0x0) returned 1 [0114.687] WriteFile (in: hFile=0x2f0, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x102, lpOverlapped=0x0) returned 1 [0114.688] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0114.688] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0114.688] WriteFile (in: hFile=0x2f4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x121e6, lpNumberOfBytesWritten=0x2caf984, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2caf984*=0x121e6, lpOverlapped=0x0) returned 1 [0114.689] FlushFileBuffers (hFile=0x2f4) returned 1 [0115.024] FlushFileBuffers (hFile=0x2f0) returned 1 [0115.037] CloseHandle (hObject=0x2f4) returned 1 [0115.041] CloseHandle (hObject=0x2f0) returned 1 [0115.046] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml")) returned 1 [0115.050] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0115.050] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x2cafc50 | out: lpFileSize=0x2cafc50*=6309) returned 1 [0115.051] CloseHandle (hObject=0x2f0) returned 1 [0115.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf")) returned 0x80 [0115.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf")) returned 0x80 [0115.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\eula.rtf.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0115.051] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0115.051] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0115.052] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0115.052] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\eula.rtf.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f4 [0115.058] ReadFile (in: hFile=0x2f0, lpBuffer=0x3071020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2cafc2c, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesRead=0x2cafc2c*=0x18a5, lpOverlapped=0x0) returned 1 [0115.066] WriteFile (in: hFile=0x2f4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x18b0, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x18b0, lpOverlapped=0x0) returned 1 [0115.070] WriteFile (in: hFile=0x2f4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0xf2, lpOverlapped=0x0) returned 1 [0115.071] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0115.071] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0115.071] WriteFile (in: hFile=0x2f0, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x18a5, lpNumberOfBytesWritten=0x2caf984, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2caf984*=0x18a5, lpOverlapped=0x0) returned 1 [0115.071] FlushFileBuffers (hFile=0x2f0) returned 1 [0115.113] FlushFileBuffers (hFile=0x2f4) returned 1 [0115.117] CloseHandle (hObject=0x2f0) returned 1 [0115.121] CloseHandle (hObject=0x2f4) returned 1 [0115.124] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf")) returned 1 [0115.128] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0115.129] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x2cafc50 | out: lpFileSize=0x2cafc50*=14168) returned 1 [0115.129] CloseHandle (hObject=0x2f4) returned 1 [0115.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll")) returned 0x80 [0115.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll")) returned 0x80 [0115.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\SetupResources.dll.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0115.130] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0115.130] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0115.130] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0115.130] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\SetupResources.dll.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f0 [0115.130] ReadFile (in: hFile=0x2f4, lpBuffer=0x3071020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2cafc2c, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesRead=0x2cafc2c*=0x3758, lpOverlapped=0x0) returned 1 [0115.135] WriteFile (in: hFile=0x2f0, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x3760, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x3760, lpOverlapped=0x0) returned 1 [0115.139] WriteFile (in: hFile=0x2f0, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x102, lpOverlapped=0x0) returned 1 [0115.139] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0115.139] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0115.139] WriteFile (in: hFile=0x2f4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x3758, lpNumberOfBytesWritten=0x2caf984, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2caf984*=0x3758, lpOverlapped=0x0) returned 1 [0115.140] FlushFileBuffers (hFile=0x2f4) returned 1 [0115.540] FlushFileBuffers (hFile=0x2f0) returned 1 [0115.546] CloseHandle (hObject=0x2f4) returned 1 [0115.548] CloseHandle (hObject=0x2f0) returned 1 [0115.552] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll")) returned 1 [0115.555] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0115.556] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x2cafc50 | out: lpFileSize=0x2cafc50*=3726) returned 1 [0115.557] CloseHandle (hObject=0x2f0) returned 1 [0115.557] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf")) returned 0x80 [0115.557] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf")) returned 0x80 [0115.557] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\eula.rtf.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0115.557] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0115.557] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0115.558] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0115.558] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\eula.rtf.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f4 [0115.562] ReadFile (in: hFile=0x2f0, lpBuffer=0x3071020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2cafc2c, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesRead=0x2cafc2c*=0xe8e, lpOverlapped=0x0) returned 1 [0115.591] WriteFile (in: hFile=0x2f4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0xe90, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0xe90, lpOverlapped=0x0) returned 1 [0115.594] WriteFile (in: hFile=0x2f4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0xf2, lpOverlapped=0x0) returned 1 [0115.594] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0115.595] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0115.595] WriteFile (in: hFile=0x2f0, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0xe8e, lpNumberOfBytesWritten=0x2caf984, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2caf984*=0xe8e, lpOverlapped=0x0) returned 1 [0115.595] FlushFileBuffers (hFile=0x2f0) returned 1 [0115.970] FlushFileBuffers (hFile=0x2f4) returned 1 [0115.973] CloseHandle (hObject=0x2f0) returned 1 [0115.975] CloseHandle (hObject=0x2f4) returned 1 [0115.977] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf")) returned 1 [0115.981] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0115.981] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x2cafc50 | out: lpFileSize=0x2cafc50*=18264) returned 1 [0115.982] CloseHandle (hObject=0x2f4) returned 1 [0115.982] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll")) returned 0x80 [0115.982] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll")) returned 0x80 [0115.982] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\SetupResources.dll.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0115.982] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0115.982] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0115.982] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0115.983] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\SetupResources.dll.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f0 [0115.983] ReadFile (in: hFile=0x2f4, lpBuffer=0x3071020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2cafc2c, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesRead=0x2cafc2c*=0x4758, lpOverlapped=0x0) returned 1 [0115.994] WriteFile (in: hFile=0x2f0, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x4760, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x4760, lpOverlapped=0x0) returned 1 [0115.997] WriteFile (in: hFile=0x2f0, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x102, lpOverlapped=0x0) returned 1 [0115.998] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0115.998] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0115.998] WriteFile (in: hFile=0x2f4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x4758, lpNumberOfBytesWritten=0x2caf984, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2caf984*=0x4758, lpOverlapped=0x0) returned 1 [0115.998] FlushFileBuffers (hFile=0x2f4) returned 1 [0116.648] FlushFileBuffers (hFile=0x2f0) returned 1 [0116.652] CloseHandle (hObject=0x2f4) returned 1 [0116.656] CloseHandle (hObject=0x2f0) returned 1 [0116.660] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll")) returned 1 [0116.664] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0116.666] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x2cafc50 | out: lpFileSize=0x2cafc50*=18264) returned 1 [0116.666] CloseHandle (hObject=0x2f0) returned 1 [0116.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll")) returned 0x80 [0116.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll")) returned 0x80 [0116.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\SetupResources.dll.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0116.667] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0116.667] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0116.667] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0116.667] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\SetupResources.dll.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f4 [0116.668] ReadFile (in: hFile=0x2f0, lpBuffer=0x3071020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2cafc2c, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesRead=0x2cafc2c*=0x4758, lpOverlapped=0x0) returned 1 [0116.672] WriteFile (in: hFile=0x2f4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x4760, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x4760, lpOverlapped=0x0) returned 1 [0116.676] WriteFile (in: hFile=0x2f4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x102, lpOverlapped=0x0) returned 1 [0116.676] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0116.676] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0116.676] WriteFile (in: hFile=0x2f0, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x4758, lpNumberOfBytesWritten=0x2caf984, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2caf984*=0x4758, lpOverlapped=0x0) returned 1 [0116.677] FlushFileBuffers (hFile=0x2f0) returned 1 [0117.742] FlushFileBuffers (hFile=0x2f4) returned 1 [0117.745] CloseHandle (hObject=0x2f0) returned 1 [0117.746] CloseHandle (hObject=0x2f4) returned 1 [0117.748] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll")) returned 1 [0117.752] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0117.752] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x2cafc50 | out: lpFileSize=0x2cafc50*=82346) returned 1 [0117.752] CloseHandle (hObject=0x2f4) returned 1 [0117.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml")) returned 0x80 [0117.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml")) returned 0x80 [0117.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\LocalizedData.xml.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0117.753] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0117.753] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0117.753] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0117.753] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\LocalizedData.xml.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f0 [0117.754] ReadFile (in: hFile=0x2f4, lpBuffer=0x3071020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2cafc2c, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesRead=0x2cafc2c*=0x141aa, lpOverlapped=0x0) returned 1 [0117.761] WriteFile (in: hFile=0x2f0, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x141b0, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x141b0, lpOverlapped=0x0) returned 1 [0117.768] WriteFile (in: hFile=0x2f0, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x102, lpOverlapped=0x0) returned 1 [0117.768] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0117.768] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0117.769] WriteFile (in: hFile=0x2f4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x141aa, lpNumberOfBytesWritten=0x2caf984, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2caf984*=0x141aa, lpOverlapped=0x0) returned 1 [0117.769] FlushFileBuffers (hFile=0x2f4) returned 1 [0117.785] FlushFileBuffers (hFile=0x2f0) returned 1 [0117.794] CloseHandle (hObject=0x2f4) returned 1 [0117.800] CloseHandle (hObject=0x2f0) returned 1 [0117.808] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml")) returned 1 [0117.826] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0117.827] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x2cafc50 | out: lpFileSize=0x2cafc50*=18776) returned 1 [0117.827] CloseHandle (hObject=0x2f0) returned 1 [0117.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll")) returned 0x80 [0117.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll")) returned 0x80 [0117.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\SetupResources.dll.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0117.827] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0117.828] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0117.828] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0117.828] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\SetupResources.dll.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f4 [0117.828] ReadFile (in: hFile=0x2f0, lpBuffer=0x3071020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2cafc2c, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesRead=0x2cafc2c*=0x4958, lpOverlapped=0x0) returned 1 [0118.349] WriteFile (in: hFile=0x2f4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x4960, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x4960, lpOverlapped=0x0) returned 1 [0118.381] WriteFile (in: hFile=0x2f4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x102, lpOverlapped=0x0) returned 1 [0118.382] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0118.383] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0118.383] WriteFile (in: hFile=0x2f0, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x4958, lpNumberOfBytesWritten=0x2caf984, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2caf984*=0x4958, lpOverlapped=0x0) returned 1 [0118.383] FlushFileBuffers (hFile=0x2f0) returned 1 [0118.764] FlushFileBuffers (hFile=0x2f4) returned 1 [0118.767] CloseHandle (hObject=0x2f0) returned 1 [0118.769] CloseHandle (hObject=0x2f4) returned 1 [0118.771] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll")) returned 1 [0118.784] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0118.784] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x2cafc50 | out: lpFileSize=0x2cafc50*=3188) returned 1 [0118.784] CloseHandle (hObject=0x2f4) returned 1 [0118.784] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf")) returned 0x80 [0118.785] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf")) returned 0x80 [0118.785] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\eula.rtf.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0118.785] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0118.785] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0118.785] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0118.786] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\eula.rtf.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f0 [0118.802] ReadFile (in: hFile=0x2f4, lpBuffer=0x3071020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2cafc2c, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesRead=0x2cafc2c*=0xc74, lpOverlapped=0x0) returned 1 [0118.813] WriteFile (in: hFile=0x2f0, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0xc80, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0xc80, lpOverlapped=0x0) returned 1 [0118.816] WriteFile (in: hFile=0x2f0, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0xf2, lpOverlapped=0x0) returned 1 [0118.816] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0118.816] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0118.817] WriteFile (in: hFile=0x2f4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0xc74, lpNumberOfBytesWritten=0x2caf984, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2caf984*=0xc74, lpOverlapped=0x0) returned 1 [0118.817] FlushFileBuffers (hFile=0x2f4) returned 1 [0118.822] FlushFileBuffers (hFile=0x2f0) returned 1 [0118.825] CloseHandle (hObject=0x2f4) returned 1 [0118.829] CloseHandle (hObject=0x2f0) returned 1 [0118.842] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf")) returned 1 [0118.846] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0118.846] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x2cafc50 | out: lpFileSize=0x2cafc50*=77232) returned 1 [0118.846] CloseHandle (hObject=0x2f0) returned 1 [0118.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml")) returned 0x80 [0118.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml")) returned 0x80 [0118.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\LocalizedData.xml.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0118.847] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0118.847] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0118.847] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0118.848] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\LocalizedData.xml.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f4 [0118.848] ReadFile (in: hFile=0x2f0, lpBuffer=0x3071020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2cafc2c, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesRead=0x2cafc2c*=0x12db0, lpOverlapped=0x0) returned 1 [0118.854] WriteFile (in: hFile=0x2f4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x12dc0, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x12dc0, lpOverlapped=0x0) returned 1 [0118.861] WriteFile (in: hFile=0x2f4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x102, lpOverlapped=0x0) returned 1 [0118.861] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0118.861] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0118.861] WriteFile (in: hFile=0x2f0, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x12db0, lpNumberOfBytesWritten=0x2caf984, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2caf984*=0x12db0, lpOverlapped=0x0) returned 1 [0118.862] FlushFileBuffers (hFile=0x2f0) returned 1 [0119.246] FlushFileBuffers (hFile=0x2f4) returned 1 [0119.255] CloseHandle (hObject=0x2f0) returned 1 [0119.260] CloseHandle (hObject=0x2f4) returned 1 [0119.264] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml")) returned 1 [0119.538] SetEvent (hEvent=0x2b8) returned 1 [0119.538] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a4 [0119.538] GetFileSizeEx (in: hFile=0x2a4, lpFileSize=0x2cafc50 | out: lpFileSize=0x2cafc50*=3702) returned 1 [0119.538] CloseHandle (hObject=0x2a4) returned 1 [0119.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf")) returned 0x80 [0119.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf")) returned 0x80 [0119.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\eula.rtf.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0119.539] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a4 [0119.539] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0119.539] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0119.540] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\eula.rtf.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc [0119.544] ReadFile (in: hFile=0x2a4, lpBuffer=0x3071020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2cafc2c, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesRead=0x2cafc2c*=0xe76, lpOverlapped=0x0) returned 1 [0119.549] WriteFile (in: hFile=0x2fc, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0xe80, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0xe80, lpOverlapped=0x0) returned 1 [0119.552] WriteFile (in: hFile=0x2fc, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0xf2, lpOverlapped=0x0) returned 1 [0119.552] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0119.553] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0119.553] WriteFile (in: hFile=0x2a4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0xe76, lpNumberOfBytesWritten=0x2caf984, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2caf984*=0xe76, lpOverlapped=0x0) returned 1 [0119.553] FlushFileBuffers (hFile=0x2a4) returned 1 [0119.564] FlushFileBuffers (hFile=0x2fc) returned 1 [0119.567] CloseHandle (hObject=0x2a4) returned 1 [0119.573] CloseHandle (hObject=0x2fc) returned 1 [0119.573] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf")) returned 1 [0119.576] SetEvent (hEvent=0x2b8) returned 1 [0119.577] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0119.577] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x2cafc50 | out: lpFileSize=0x2cafc50*=77022) returned 1 [0119.577] CloseHandle (hObject=0x2fc) returned 1 [0119.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml")) returned 0x80 [0119.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml")) returned 0x80 [0119.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\LocalizedData.xml.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0119.578] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0119.578] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0119.578] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0119.578] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\LocalizedData.xml.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a4 [0119.579] ReadFile (in: hFile=0x2fc, lpBuffer=0x3071020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2cafc2c, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesRead=0x2cafc2c*=0x12cde, lpOverlapped=0x0) returned 1 [0119.586] WriteFile (in: hFile=0x2a4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x12ce0, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x12ce0, lpOverlapped=0x0) returned 1 [0119.592] WriteFile (in: hFile=0x2a4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x102, lpOverlapped=0x0) returned 1 [0119.592] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0119.592] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0119.593] WriteFile (in: hFile=0x2fc, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x12cde, lpNumberOfBytesWritten=0x2caf984, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2caf984*=0x12cde, lpOverlapped=0x0) returned 1 [0119.593] FlushFileBuffers (hFile=0x2fc) returned 1 [0120.088] FlushFileBuffers (hFile=0x2a4) returned 1 [0120.093] CloseHandle (hObject=0x2fc) returned 1 [0120.099] CloseHandle (hObject=0x2a4) returned 1 [0120.108] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml")) returned 1 [0120.112] SetEvent (hEvent=0x2b8) returned 1 [0120.113] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a4 [0120.113] GetFileSizeEx (in: hFile=0x2a4, lpFileSize=0x2cafc50 | out: lpFileSize=0x2cafc50*=3526) returned 1 [0120.113] CloseHandle (hObject=0x2a4) returned 1 [0120.113] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf")) returned 0x80 [0120.114] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf")) returned 0x80 [0120.114] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\eula.rtf.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0120.114] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a4 [0120.114] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0120.114] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0120.115] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\eula.rtf.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc [0120.119] ReadFile (in: hFile=0x2a4, lpBuffer=0x3071020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2cafc2c, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesRead=0x2cafc2c*=0xdc6, lpOverlapped=0x0) returned 1 [0120.129] WriteFile (in: hFile=0x2fc, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0xdd0, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0xdd0, lpOverlapped=0x0) returned 1 [0120.132] WriteFile (in: hFile=0x2fc, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0xf2, lpOverlapped=0x0) returned 1 [0120.132] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0120.132] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0120.132] WriteFile (in: hFile=0x2a4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0xdc6, lpNumberOfBytesWritten=0x2caf984, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2caf984*=0xdc6, lpOverlapped=0x0) returned 1 [0120.133] FlushFileBuffers (hFile=0x2a4) returned 1 [0120.137] FlushFileBuffers (hFile=0x2fc) returned 1 [0120.141] CloseHandle (hObject=0x2a4) returned 1 [0120.142] CloseHandle (hObject=0x2fc) returned 1 [0120.143] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf")) returned 1 [0120.146] SetEvent (hEvent=0x2b8) returned 1 [0120.146] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0120.147] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x2cafc50 | out: lpFileSize=0x2cafc50*=82962) returned 1 [0120.147] CloseHandle (hObject=0x2fc) returned 1 [0120.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml")) returned 0x80 [0120.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml")) returned 0x80 [0120.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\LocalizedData.xml.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0120.147] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0120.148] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0120.148] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0120.148] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\LocalizedData.xml.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a4 [0120.148] ReadFile (in: hFile=0x2fc, lpBuffer=0x3071020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2cafc2c, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesRead=0x2cafc2c*=0x14412, lpOverlapped=0x0) returned 1 [0120.155] WriteFile (in: hFile=0x2a4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x14420, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x14420, lpOverlapped=0x0) returned 1 [0120.163] WriteFile (in: hFile=0x2a4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x102, lpOverlapped=0x0) returned 1 [0120.164] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0120.164] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0120.164] WriteFile (in: hFile=0x2fc, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x14412, lpNumberOfBytesWritten=0x2caf984, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2caf984*=0x14412, lpOverlapped=0x0) returned 1 [0120.165] FlushFileBuffers (hFile=0x2fc) returned 1 [0120.603] FlushFileBuffers (hFile=0x2a4) returned 1 [0120.606] CloseHandle (hObject=0x2fc) returned 1 [0120.612] CloseHandle (hObject=0x2a4) returned 1 [0120.617] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml")) returned 1 [0120.621] SetEvent (hEvent=0x2b8) returned 1 [0120.622] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a4 [0120.622] GetFileSizeEx (in: hFile=0x2a4, lpFileSize=0x2cafc50 | out: lpFileSize=0x2cafc50*=6851) returned 1 [0120.623] CloseHandle (hObject=0x2a4) returned 1 [0120.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf")) returned 0x80 [0120.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf")) returned 0x80 [0120.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\eula.rtf.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0120.623] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a4 [0120.623] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0120.624] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0120.624] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\eula.rtf.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc [0120.629] ReadFile (in: hFile=0x2a4, lpBuffer=0x3071020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2cafc2c, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesRead=0x2cafc2c*=0x1ac3, lpOverlapped=0x0) returned 1 [0120.634] WriteFile (in: hFile=0x2fc, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x1ad0, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x1ad0, lpOverlapped=0x0) returned 1 [0120.637] WriteFile (in: hFile=0x2fc, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0xf2, lpOverlapped=0x0) returned 1 [0120.638] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0120.638] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0120.638] WriteFile (in: hFile=0x2a4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x1ac3, lpNumberOfBytesWritten=0x2caf984, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2caf984*=0x1ac3, lpOverlapped=0x0) returned 1 [0120.638] FlushFileBuffers (hFile=0x2a4) returned 1 [0120.648] FlushFileBuffers (hFile=0x2fc) returned 1 [0120.667] CloseHandle (hObject=0x2a4) returned 1 [0120.672] CloseHandle (hObject=0x2fc) returned 1 [0120.677] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf")) returned 1 [0120.680] SetEvent (hEvent=0x2b8) returned 1 [0120.680] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0120.705] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x2cafc50 | out: lpFileSize=0x2cafc50*=16728) returned 1 [0120.705] CloseHandle (hObject=0x2fc) returned 1 [0120.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll")) returned 0x80 [0120.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll")) returned 0x80 [0120.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\SetupResources.dll.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0120.706] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0120.706] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0120.706] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0120.706] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\SetupResources.dll.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a4 [0120.707] ReadFile (in: hFile=0x2fc, lpBuffer=0x3071020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2cafc2c, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesRead=0x2cafc2c*=0x4158, lpOverlapped=0x0) returned 1 [0120.711] WriteFile (in: hFile=0x2a4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x4160, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x4160, lpOverlapped=0x0) returned 1 [0120.715] WriteFile (in: hFile=0x2a4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x102, lpOverlapped=0x0) returned 1 [0120.715] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0120.715] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0120.716] WriteFile (in: hFile=0x2fc, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x4158, lpNumberOfBytesWritten=0x2caf984, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2caf984*=0x4158, lpOverlapped=0x0) returned 1 [0120.716] FlushFileBuffers (hFile=0x2fc) returned 1 [0121.198] FlushFileBuffers (hFile=0x2a4) returned 1 [0121.202] CloseHandle (hObject=0x2fc) returned 1 [0121.204] CloseHandle (hObject=0x2a4) returned 1 [0121.208] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll")) returned 1 [0121.211] SetEvent (hEvent=0x2b8) returned 1 [0121.212] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a4 [0121.213] GetFileSizeEx (in: hFile=0x2a4, lpFileSize=0x2cafc50 | out: lpFileSize=0x2cafc50*=86442) returned 1 [0121.213] CloseHandle (hObject=0x2a4) returned 1 [0121.213] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml")) returned 0x80 [0121.213] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml")) returned 0x80 [0121.213] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\LocalizedData.xml.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0121.214] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a4 [0121.214] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0121.214] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0121.214] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\LocalizedData.xml.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc [0121.215] ReadFile (in: hFile=0x2a4, lpBuffer=0x3071020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2cafc2c, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesRead=0x2cafc2c*=0x151aa, lpOverlapped=0x0) returned 1 [0121.222] WriteFile (in: hFile=0x2fc, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x151b0, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x151b0, lpOverlapped=0x0) returned 1 [0121.228] WriteFile (in: hFile=0x2fc, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x102, lpOverlapped=0x0) returned 1 [0121.229] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0121.229] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0121.229] WriteFile (in: hFile=0x2a4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x151aa, lpNumberOfBytesWritten=0x2caf984, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2caf984*=0x151aa, lpOverlapped=0x0) returned 1 [0121.230] FlushFileBuffers (hFile=0x2a4) returned 1 [0121.910] FlushFileBuffers (hFile=0x2fc) returned 1 [0121.914] CloseHandle (hObject=0x2a4) returned 1 [0121.919] CloseHandle (hObject=0x2fc) returned 1 [0121.924] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml")) returned 1 [0121.928] SetEvent (hEvent=0x2b8) returned 1 [0121.928] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0121.935] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x2cafc50 | out: lpFileSize=0x2cafc50*=3643) returned 1 [0121.935] CloseHandle (hObject=0x2fc) returned 1 [0121.935] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf")) returned 0x80 [0121.935] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf")) returned 0x80 [0121.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\eula.rtf.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0121.936] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0121.936] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0121.936] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0121.936] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\eula.rtf.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a4 [0121.941] ReadFile (in: hFile=0x2fc, lpBuffer=0x3071020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2cafc2c, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesRead=0x2cafc2c*=0xe3b, lpOverlapped=0x0) returned 1 [0121.945] WriteFile (in: hFile=0x2a4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0xe40, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0xe40, lpOverlapped=0x0) returned 1 [0121.947] WriteFile (in: hFile=0x2a4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0xf2, lpOverlapped=0x0) returned 1 [0121.948] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0121.948] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0121.948] WriteFile (in: hFile=0x2fc, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0xe3b, lpNumberOfBytesWritten=0x2caf984, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2caf984*=0xe3b, lpOverlapped=0x0) returned 1 [0121.948] FlushFileBuffers (hFile=0x2fc) returned 1 [0121.953] FlushFileBuffers (hFile=0x2a4) returned 1 [0121.960] CloseHandle (hObject=0x2fc) returned 1 [0121.961] CloseHandle (hObject=0x2a4) returned 1 [0121.963] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf")) returned 1 [0121.966] SetEvent (hEvent=0x2b8) returned 1 [0121.966] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a4 [0121.966] GetFileSizeEx (in: hFile=0x2a4, lpFileSize=0x2cafc50 | out: lpFileSize=0x2cafc50*=80060) returned 1 [0121.966] CloseHandle (hObject=0x2a4) returned 1 [0121.967] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml")) returned 0x80 [0121.967] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml")) returned 0x80 [0121.967] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\LocalizedData.xml.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0121.967] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a4 [0121.967] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0121.967] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0121.968] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\LocalizedData.xml.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc [0121.968] ReadFile (in: hFile=0x2a4, lpBuffer=0x3071020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2cafc2c, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesRead=0x2cafc2c*=0x138bc, lpOverlapped=0x0) returned 1 [0121.976] WriteFile (in: hFile=0x2fc, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x138c0, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x138c0, lpOverlapped=0x0) returned 1 [0121.982] WriteFile (in: hFile=0x2fc, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x102, lpOverlapped=0x0) returned 1 [0121.982] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0121.982] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0121.982] WriteFile (in: hFile=0x2a4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x138bc, lpNumberOfBytesWritten=0x2caf984, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2caf984*=0x138bc, lpOverlapped=0x0) returned 1 [0121.983] FlushFileBuffers (hFile=0x2a4) returned 1 [0122.332] FlushFileBuffers (hFile=0x2fc) returned 1 [0122.338] CloseHandle (hObject=0x2a4) returned 1 [0122.342] CloseHandle (hObject=0x2fc) returned 1 [0122.347] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml")) returned 1 [0122.351] SetEvent (hEvent=0x2b8) returned 1 [0122.351] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0122.353] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x2cafc50 | out: lpFileSize=0x2cafc50*=10125) returned 1 [0122.353] CloseHandle (hObject=0x2fc) returned 1 [0122.353] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf")) returned 0x80 [0122.353] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf")) returned 0x80 [0122.353] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\eula.rtf.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0122.353] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0122.354] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0122.354] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0122.354] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\eula.rtf.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a4 [0122.358] ReadFile (in: hFile=0x2fc, lpBuffer=0x3071020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2cafc2c, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesRead=0x2cafc2c*=0x278d, lpOverlapped=0x0) returned 1 [0122.363] WriteFile (in: hFile=0x2a4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x2790, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x2790, lpOverlapped=0x0) returned 1 [0122.366] WriteFile (in: hFile=0x2a4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0xf2, lpOverlapped=0x0) returned 1 [0122.366] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0122.366] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0122.366] WriteFile (in: hFile=0x2fc, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x278d, lpNumberOfBytesWritten=0x2caf984, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2caf984*=0x278d, lpOverlapped=0x0) returned 1 [0122.366] FlushFileBuffers (hFile=0x2fc) returned 1 [0122.926] FlushFileBuffers (hFile=0x2a4) returned 1 [0122.942] CloseHandle (hObject=0x2fc) returned 1 [0122.945] CloseHandle (hObject=0x2a4) returned 1 [0122.948] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf")) returned 1 [0122.951] SetEvent (hEvent=0x2b8) returned 1 [0122.951] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a4 [0122.952] GetFileSizeEx (in: hFile=0x2a4, lpFileSize=0x2cafc50 | out: lpFileSize=0x2cafc50*=15704) returned 1 [0122.952] CloseHandle (hObject=0x2a4) returned 1 [0122.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll")) returned 0x80 [0122.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll")) returned 0x80 [0122.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\SetupResources.dll.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0122.962] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0122.963] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0122.963] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0122.963] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\SetupResources.dll.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f4 [0122.964] ReadFile (in: hFile=0x2f0, lpBuffer=0x3071020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2cafc2c, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesRead=0x2cafc2c*=0x3d58, lpOverlapped=0x0) returned 1 [0122.982] WriteFile (in: hFile=0x2f4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x3d60, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x3d60, lpOverlapped=0x0) returned 1 [0122.985] WriteFile (in: hFile=0x2f4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x102, lpOverlapped=0x0) returned 1 [0122.986] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0122.986] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0122.986] WriteFile (in: hFile=0x2f0, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x3d58, lpNumberOfBytesWritten=0x2caf984, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2caf984*=0x3d58, lpOverlapped=0x0) returned 1 [0122.987] FlushFileBuffers (hFile=0x2f0) returned 1 [0123.397] FlushFileBuffers (hFile=0x2f4) returned 1 [0123.401] CloseHandle (hObject=0x2f0) returned 1 [0123.405] CloseHandle (hObject=0x2f4) returned 1 [0123.406] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll")) returned 1 [0123.413] SetEvent (hEvent=0x2b8) returned 1 [0123.414] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0123.415] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x2cafc50 | out: lpFileSize=0x2cafc50*=15192) returned 1 [0123.415] CloseHandle (hObject=0x2f4) returned 1 [0123.415] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll")) returned 0x80 [0123.415] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll")) returned 0x80 [0123.415] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\SetupResources.dll.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0123.415] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0123.416] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0123.416] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0123.416] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\SetupResources.dll.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a4 [0123.549] ReadFile (in: hFile=0x2f4, lpBuffer=0x3071020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2cafc2c, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesRead=0x2cafc2c*=0x3b58, lpOverlapped=0x0) returned 1 [0123.554] WriteFile (in: hFile=0x2a4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x3b60, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x3b60, lpOverlapped=0x0) returned 1 [0123.559] WriteFile (in: hFile=0x2a4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x102, lpOverlapped=0x0) returned 1 [0123.559] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0123.559] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0123.560] WriteFile (in: hFile=0x2f4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x3b58, lpNumberOfBytesWritten=0x2caf984, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2caf984*=0x3b58, lpOverlapped=0x0) returned 1 [0123.560] FlushFileBuffers (hFile=0x2f4) returned 1 [0123.893] FlushFileBuffers (hFile=0x2a4) returned 1 [0123.897] CloseHandle (hObject=0x2f4) returned 1 [0123.899] CloseHandle (hObject=0x2a4) returned 1 [0123.904] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll")) returned 1 [0123.907] SetEvent (hEvent=0x2b8) returned 1 [0123.907] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a4 [0123.911] GetFileSizeEx (in: hFile=0x2a4, lpFileSize=0x2cafc50 | out: lpFileSize=0x2cafc50*=19288) returned 1 [0123.911] CloseHandle (hObject=0x2a4) returned 1 [0123.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll")) returned 0x80 [0123.912] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll")) returned 0x80 [0123.912] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\SetupResources.dll.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0123.912] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a4 [0123.912] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0123.912] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0123.912] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\SetupResources.dll.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f4 [0123.913] ReadFile (in: hFile=0x2a4, lpBuffer=0x3071020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2cafc2c, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesRead=0x2cafc2c*=0x4b58, lpOverlapped=0x0) returned 1 [0123.918] WriteFile (in: hFile=0x2f4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x4b60, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x4b60, lpOverlapped=0x0) returned 1 [0123.921] WriteFile (in: hFile=0x2f4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x102, lpOverlapped=0x0) returned 1 [0123.922] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0123.922] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0123.922] WriteFile (in: hFile=0x2a4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x4b58, lpNumberOfBytesWritten=0x2caf984, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2caf984*=0x4b58, lpOverlapped=0x0) returned 1 [0123.922] FlushFileBuffers (hFile=0x2a4) returned 1 [0124.571] FlushFileBuffers (hFile=0x2f4) returned 1 [0124.576] CloseHandle (hObject=0x2a4) returned 1 [0124.580] CloseHandle (hObject=0x2f4) returned 1 [0124.584] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll")) returned 1 [0124.588] SetEvent (hEvent=0x2b8) returned 1 [0124.589] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0124.589] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x2cafc50 | out: lpFileSize=0x2cafc50*=17752) returned 1 [0124.589] CloseHandle (hObject=0x2f4) returned 1 [0124.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll")) returned 0x80 [0124.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll")) returned 0x80 [0124.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\SetupResources.dll.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0124.590] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0124.591] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0124.591] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0124.591] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\SetupResources.dll.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a4 [0124.591] ReadFile (in: hFile=0x2f4, lpBuffer=0x3071020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2cafc2c, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesRead=0x2cafc2c*=0x4558, lpOverlapped=0x0) returned 1 [0124.597] WriteFile (in: hFile=0x2a4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x4560, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x4560, lpOverlapped=0x0) returned 1 [0124.600] WriteFile (in: hFile=0x2a4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x102, lpOverlapped=0x0) returned 1 [0124.601] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0124.601] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0124.601] WriteFile (in: hFile=0x2f4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x4558, lpNumberOfBytesWritten=0x2caf984, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2caf984*=0x4558, lpOverlapped=0x0) returned 1 [0124.601] FlushFileBuffers (hFile=0x2f4) returned 1 [0125.321] FlushFileBuffers (hFile=0x2a4) returned 1 [0125.326] CloseHandle (hObject=0x2f4) returned 1 [0125.329] CloseHandle (hObject=0x2a4) returned 1 [0125.332] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll")) returned 1 [0125.338] SetEvent (hEvent=0x2b8) returned 1 [0125.338] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a4 [0125.348] GetFileSizeEx (in: hFile=0x2a4, lpFileSize=0x2cafc50 | out: lpFileSize=0x2cafc50*=18264) returned 1 [0125.349] CloseHandle (hObject=0x2a4) returned 1 [0125.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll")) returned 0x80 [0125.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll")) returned 0x80 [0125.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\SetupResources.dll.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0125.349] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a4 [0125.349] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0125.350] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0125.350] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\SetupResources.dll.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f4 [0125.351] ReadFile (in: hFile=0x2a4, lpBuffer=0x3071020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2cafc2c, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesRead=0x2cafc2c*=0x4758, lpOverlapped=0x0) returned 1 [0125.359] WriteFile (in: hFile=0x2f4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x4760, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x4760, lpOverlapped=0x0) returned 1 [0125.363] WriteFile (in: hFile=0x2f4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x102, lpOverlapped=0x0) returned 1 [0125.363] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0125.363] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0125.363] WriteFile (in: hFile=0x2a4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x4758, lpNumberOfBytesWritten=0x2caf984, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2caf984*=0x4758, lpOverlapped=0x0) returned 1 [0125.364] FlushFileBuffers (hFile=0x2a4) returned 1 [0125.852] FlushFileBuffers (hFile=0x2f4) returned 1 [0125.858] CloseHandle (hObject=0x2a4) returned 1 [0125.860] CloseHandle (hObject=0x2f4) returned 1 [0125.868] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll")) returned 1 [0125.871] SetEvent (hEvent=0x2b8) returned 1 [0125.872] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0125.872] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x2cafc50 | out: lpFileSize=0x2cafc50*=80738) returned 1 [0125.872] CloseHandle (hObject=0x2f4) returned 1 [0125.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml")) returned 0x80 [0125.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml")) returned 0x80 [0125.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\LocalizedData.xml.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0125.873] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0125.873] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0125.874] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0125.874] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\LocalizedData.xml.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a4 [0125.874] ReadFile (in: hFile=0x2f4, lpBuffer=0x3071020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2cafc2c, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesRead=0x2cafc2c*=0x13b62, lpOverlapped=0x0) returned 1 [0125.881] WriteFile (in: hFile=0x2a4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x13b70, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x13b70, lpOverlapped=0x0) returned 1 [0125.887] WriteFile (in: hFile=0x2a4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x102, lpOverlapped=0x0) returned 1 [0125.888] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0125.888] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0125.888] WriteFile (in: hFile=0x2f4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x13b62, lpNumberOfBytesWritten=0x2caf984, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2caf984*=0x13b62, lpOverlapped=0x0) returned 1 [0125.889] FlushFileBuffers (hFile=0x2f4) returned 1 [0126.619] FlushFileBuffers (hFile=0x2a4) returned 1 [0126.623] CloseHandle (hObject=0x2f4) returned 1 [0126.628] CloseHandle (hObject=0x2a4) returned 1 [0126.634] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml")) returned 1 [0126.638] SetEvent (hEvent=0x2b8) returned 1 [0126.639] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a4 [0126.641] GetFileSizeEx (in: hFile=0x2a4, lpFileSize=0x2cafc50 | out: lpFileSize=0x2cafc50*=54456) returned 1 [0126.641] CloseHandle (hObject=0x2a4) returned 1 [0126.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf")) returned 0x80 [0126.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf")) returned 0x80 [0126.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\eula.rtf.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0126.642] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a4 [0126.642] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0126.642] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0126.642] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\eula.rtf.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f4 [0126.648] ReadFile (in: hFile=0x2a4, lpBuffer=0x3071020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2cafc2c, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesRead=0x2cafc2c*=0xd4b8, lpOverlapped=0x0) returned 1 [0126.656] WriteFile (in: hFile=0x2f4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0xd4c0, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0xd4c0, lpOverlapped=0x0) returned 1 [0126.661] WriteFile (in: hFile=0x2f4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0xf2, lpOverlapped=0x0) returned 1 [0126.661] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0126.661] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0126.661] WriteFile (in: hFile=0x2a4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0xd4b8, lpNumberOfBytesWritten=0x2caf984, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2caf984*=0xd4b8, lpOverlapped=0x0) returned 1 [0126.662] FlushFileBuffers (hFile=0x2a4) returned 1 [0126.719] FlushFileBuffers (hFile=0x2f4) returned 1 [0126.722] CloseHandle (hObject=0x2a4) returned 1 [0126.726] CloseHandle (hObject=0x2f4) returned 1 [0126.729] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf")) returned 1 [0126.734] SetEvent (hEvent=0x2b8) returned 1 [0126.735] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0126.735] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x2cafc50 | out: lpFileSize=0x2cafc50*=81482) returned 1 [0126.735] CloseHandle (hObject=0x2f4) returned 1 [0126.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml")) returned 0x80 [0126.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml")) returned 0x80 [0126.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\LocalizedData.xml.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0126.736] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0126.736] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0126.736] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0126.736] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\LocalizedData.xml.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a4 [0126.737] ReadFile (in: hFile=0x2f4, lpBuffer=0x3071020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2cafc2c, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesRead=0x2cafc2c*=0x13e4a, lpOverlapped=0x0) returned 1 [0126.744] WriteFile (in: hFile=0x2a4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x13e50, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x13e50, lpOverlapped=0x0) returned 1 [0126.751] WriteFile (in: hFile=0x2a4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x102, lpOverlapped=0x0) returned 1 [0126.752] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0126.752] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0126.752] WriteFile (in: hFile=0x2f4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x13e4a, lpNumberOfBytesWritten=0x2caf984, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2caf984*=0x13e4a, lpOverlapped=0x0) returned 1 [0126.753] FlushFileBuffers (hFile=0x2f4) returned 1 [0130.088] FlushFileBuffers (hFile=0x2a4) returned 1 [0130.094] CloseHandle (hObject=0x2f4) returned 1 [0130.102] CloseHandle (hObject=0x2a4) returned 1 [0130.116] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml")) returned 1 [0130.127] SetEvent (hEvent=0x2b8) returned 1 [0130.127] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a4 [0130.129] GetFileSizeEx (in: hFile=0x2a4, lpFileSize=0x2cafc50 | out: lpFileSize=0x2cafc50*=3865) returned 1 [0130.129] CloseHandle (hObject=0x2a4) returned 1 [0130.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf")) returned 0x80 [0130.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf")) returned 0x80 [0130.130] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\eula.rtf.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0130.130] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a4 [0130.130] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0130.130] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0130.130] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\eula.rtf.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc [0130.667] ReadFile (in: hFile=0x2a4, lpBuffer=0x3071020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2cafc2c, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesRead=0x2cafc2c*=0xf19, lpOverlapped=0x0) returned 1 [0130.676] WriteFile (in: hFile=0x2fc, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0xf20, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0xf20, lpOverlapped=0x0) returned 1 [0130.678] WriteFile (in: hFile=0x2fc, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0xf2, lpOverlapped=0x0) returned 1 [0130.679] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0130.679] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0130.679] WriteFile (in: hFile=0x2a4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0xf19, lpNumberOfBytesWritten=0x2caf984, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2caf984*=0xf19, lpOverlapped=0x0) returned 1 [0130.679] FlushFileBuffers (hFile=0x2a4) returned 1 [0130.687] FlushFileBuffers (hFile=0x2fc) returned 1 [0130.690] CloseHandle (hObject=0x2a4) returned 1 [0130.691] CloseHandle (hObject=0x2fc) returned 1 [0130.692] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf")) returned 1 [0130.695] SetEvent (hEvent=0x2b8) returned 1 [0130.695] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0130.696] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x2cafc50 | out: lpFileSize=0x2cafc50*=17752) returned 1 [0130.696] CloseHandle (hObject=0x2fc) returned 1 [0130.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll")) returned 0x80 [0130.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll")) returned 0x80 [0130.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\SetupResources.dll.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0130.697] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0130.697] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0130.697] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0130.697] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\SetupResources.dll.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a4 [0130.697] ReadFile (in: hFile=0x2fc, lpBuffer=0x3071020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2cafc2c, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesRead=0x2cafc2c*=0x4558, lpOverlapped=0x0) returned 1 [0130.703] WriteFile (in: hFile=0x2a4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x4560, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x4560, lpOverlapped=0x0) returned 1 [0130.707] WriteFile (in: hFile=0x2a4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x102, lpOverlapped=0x0) returned 1 [0130.707] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0130.707] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0130.707] WriteFile (in: hFile=0x2fc, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x4558, lpNumberOfBytesWritten=0x2caf984, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2caf984*=0x4558, lpOverlapped=0x0) returned 1 [0130.708] FlushFileBuffers (hFile=0x2fc) returned 1 [0132.143] FlushFileBuffers (hFile=0x2a4) returned 1 [0132.146] CloseHandle (hObject=0x2fc) returned 1 [0132.147] CloseHandle (hObject=0x2a4) returned 1 [0132.152] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll")) returned 1 [0132.156] SetEvent (hEvent=0x2b8) returned 1 [0132.156] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a4 [0132.156] GetFileSizeEx (in: hFile=0x2a4, lpFileSize=0x2cafc50 | out: lpFileSize=0x2cafc50*=17752) returned 1 [0132.156] CloseHandle (hObject=0x2a4) returned 1 [0132.156] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll")) returned 0x80 [0132.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll")) returned 0x80 [0132.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\SetupResources.dll.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0132.157] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a4 [0132.157] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0132.157] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0132.157] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\SetupResources.dll.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc [0132.158] ReadFile (in: hFile=0x2a4, lpBuffer=0x3071020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2cafc2c, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesRead=0x2cafc2c*=0x4558, lpOverlapped=0x0) returned 1 [0132.170] WriteFile (in: hFile=0x2fc, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x4560, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x4560, lpOverlapped=0x0) returned 1 [0132.174] WriteFile (in: hFile=0x2fc, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x102, lpOverlapped=0x0) returned 1 [0132.174] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0132.174] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0132.174] WriteFile (in: hFile=0x2a4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x4558, lpNumberOfBytesWritten=0x2caf984, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2caf984*=0x4558, lpOverlapped=0x0) returned 1 [0132.175] FlushFileBuffers (hFile=0x2a4) returned 1 [0132.944] FlushFileBuffers (hFile=0x2fc) returned 1 [0132.960] CloseHandle (hObject=0x2a4) returned 1 [0132.963] CloseHandle (hObject=0x2fc) returned 1 [0132.972] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll")) returned 1 [0132.978] SetEvent (hEvent=0x2b8) returned 1 [0132.979] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0132.981] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x2cafc50 | out: lpFileSize=0x2cafc50*=5827) returned 1 [0132.981] CloseHandle (hObject=0x2fc) returned 1 [0132.981] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf")) returned 0x80 [0132.981] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf")) returned 0x80 [0132.981] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\eula.rtf.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0132.982] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0132.982] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0132.982] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0132.982] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\eula.rtf.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f4 [0133.139] ReadFile (in: hFile=0x2fc, lpBuffer=0x3071020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2cafc2c, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesRead=0x2cafc2c*=0x16c3, lpOverlapped=0x0) returned 1 [0133.144] WriteFile (in: hFile=0x2f4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x16d0, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x16d0, lpOverlapped=0x0) returned 1 [0133.148] WriteFile (in: hFile=0x2f4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0xf2, lpOverlapped=0x0) returned 1 [0133.148] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0133.148] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0133.149] WriteFile (in: hFile=0x2fc, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x16c3, lpNumberOfBytesWritten=0x2caf984, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2caf984*=0x16c3, lpOverlapped=0x0) returned 1 [0133.149] FlushFileBuffers (hFile=0x2fc) returned 1 [0134.663] FlushFileBuffers (hFile=0x2f4) returned 1 [0135.337] CloseHandle (hObject=0x2fc) returned 1 [0135.339] CloseHandle (hObject=0x2f4) returned 1 [0135.340] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf")) returned 1 [0135.344] SetEvent (hEvent=0x2b8) returned 1 [0135.345] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0135.345] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x2cafc50 | out: lpFileSize=0x2cafc50*=14168) returned 1 [0135.345] CloseHandle (hObject=0x2f4) returned 1 [0135.345] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll")) returned 0x80 [0135.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll")) returned 0x80 [0135.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\SetupResources.dll.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0135.346] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0135.346] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0135.346] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0135.346] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\SetupResources.dll.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc [0135.347] ReadFile (in: hFile=0x2f4, lpBuffer=0x3071020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2cafc2c, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesRead=0x2cafc2c*=0x3758, lpOverlapped=0x0) returned 1 [0135.357] WriteFile (in: hFile=0x2fc, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x3760, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x3760, lpOverlapped=0x0) returned 1 [0135.360] WriteFile (in: hFile=0x2fc, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x102, lpOverlapped=0x0) returned 1 [0135.361] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0135.361] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0135.361] WriteFile (in: hFile=0x2f4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x3758, lpNumberOfBytesWritten=0x2caf984, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2caf984*=0x3758, lpOverlapped=0x0) returned 1 [0135.361] FlushFileBuffers (hFile=0x2f4) returned 1 [0136.398] FlushFileBuffers (hFile=0x2fc) returned 1 [0136.401] CloseHandle (hObject=0x2f4) returned 1 [0136.401] CloseHandle (hObject=0x2fc) returned 1 [0136.404] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll")) returned 1 [0136.407] SetEvent (hEvent=0x2b8) returned 1 [0136.407] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0136.408] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x2cafc50 | out: lpFileSize=0x2cafc50*=6309) returned 1 [0136.408] CloseHandle (hObject=0x2fc) returned 1 [0136.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf")) returned 0x80 [0136.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf")) returned 0x80 [0136.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\eula.rtf.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0136.409] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0136.409] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0136.409] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2cafc18 | out: lpNewFilePointer=0x0) returned 1 [0136.409] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\eula.rtf.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f4 [0136.413] ReadFile (in: hFile=0x2fc, lpBuffer=0x3071020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2cafc2c, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesRead=0x2cafc2c*=0x18a5, lpOverlapped=0x0) returned 1 [0136.417] WriteFile (in: hFile=0x2f4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x18b0, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0x18b0, lpOverlapped=0x0) returned 1 [0136.420] WriteFile (in: hFile=0x2f4, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2cafc04, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2cafc04*=0xf2, lpOverlapped=0x0) returned 1 [0136.420] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0136.420] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2caf978 | out: lpNewFilePointer=0x0) returned 1 [0136.421] WriteFile (in: hFile=0x2fc, lpBuffer=0x3071020*, nNumberOfBytesToWrite=0x18a5, lpNumberOfBytesWritten=0x2caf984, lpOverlapped=0x0 | out: lpBuffer=0x3071020*, lpNumberOfBytesWritten=0x2caf984*=0x18a5, lpOverlapped=0x0) returned 1 [0136.421] FlushFileBuffers (hFile=0x2fc) Thread: id = 24 os_tid = 0xe7c [0113.058] GetProcessHeap () returned 0xae0000 [0113.058] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0xba52a8 [0113.059] GetProcessHeap () returned 0xae0000 [0113.059] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0xbb52b0 [0113.060] GetProcessHeap () returned 0xae0000 [0113.060] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x28) returned 0xb526f0 [0113.060] GetProcessHeap () returned 0xae0000 [0113.060] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x110102) returned 0x3196020 [0113.069] GetProcessHeap () returned 0xae0000 [0113.069] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x50) returned 0xb09810 [0113.069] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75e90000 [0113.069] GetProcAddress (hModule=0x75e90000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75ea6b30 [0113.069] Wow64DisableWow64FsRedirection (in: OldValue=0x2defe30 | out: OldValue=0x2defe30*=0x0) returned 1 [0113.069] GetProcessHeap () returned 0xae0000 [0113.069] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb09810 | out: hHeap=0xae0000) returned 1 [0113.070] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0113.074] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x2defdd8 | out: lpFileSize=0x2defdd8*=6004) returned 1 [0113.074] CloseHandle (hObject=0x2f8) returned 1 [0113.074] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log")) returned 0x20 [0113.074] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log")) returned 0x20 [0113.074] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0113.076] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0113.076] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0113.076] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0113.076] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2fc [0113.077] ReadFile (in: hFile=0x2f8, lpBuffer=0x3196020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2defdb4, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesRead=0x2defdb4*=0x1774, lpOverlapped=0x0) returned 1 [0113.443] WriteFile (in: hFile=0x2fc, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x1780, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x1780, lpOverlapped=0x0) returned 1 [0113.447] WriteFile (in: hFile=0x2fc, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x122, lpOverlapped=0x0) returned 1 [0113.448] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0113.448] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0113.448] WriteFile (in: hFile=0x2f8, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x1774, lpNumberOfBytesWritten=0x2defb0c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defb0c*=0x1774, lpOverlapped=0x0) returned 1 [0113.448] FlushFileBuffers (hFile=0x2f8) returned 1 [0114.413] FlushFileBuffers (hFile=0x2fc) returned 1 [0114.419] CloseHandle (hObject=0x2f8) returned 1 [0114.421] CloseHandle (hObject=0x2fc) returned 1 [0114.422] DeleteFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log")) returned 1 [0114.425] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0114.429] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x2defdd8 | out: lpFileSize=0x2defdd8*=156) returned 1 [0114.429] CloseHandle (hObject=0x2fc) returned 1 [0114.429] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini")) returned 0x20 [0114.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini")) returned 0x20 [0114.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0114.430] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0114.430] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0114.430] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0114.431] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2f8 [0114.431] ReadFile (in: hFile=0x2fc, lpBuffer=0x3196020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2defdb4, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesRead=0x2defdb4*=0x9c, lpOverlapped=0x0) returned 1 [0114.435] WriteFile (in: hFile=0x2f8, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0xa0, lpOverlapped=0x0) returned 1 [0114.437] WriteFile (in: hFile=0x2f8, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x102, lpOverlapped=0x0) returned 1 [0114.437] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0114.438] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0114.438] WriteFile (in: hFile=0x2fc, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x9c, lpNumberOfBytesWritten=0x2defb0c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defb0c*=0x9c, lpOverlapped=0x0) returned 1 [0114.438] FlushFileBuffers (hFile=0x2fc) returned 1 [0114.444] FlushFileBuffers (hFile=0x2f8) returned 1 [0114.450] CloseHandle (hObject=0x2fc) returned 1 [0114.451] CloseHandle (hObject=0x2f8) returned 1 [0114.452] DeleteFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini")) returned 1 [0114.455] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0114.456] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x2defdd8 | out: lpFileSize=0x2defdd8*=577) returned 1 [0114.456] CloseHandle (hObject=0x2f8) returned 1 [0114.456] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd")) returned 0x20 [0114.456] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd")) returned 0x20 [0114.456] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0114.456] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0114.457] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0114.457] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0114.457] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2fc [0114.457] ReadFile (in: hFile=0x2f8, lpBuffer=0x3196020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2defdb4, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesRead=0x2defdb4*=0x241, lpOverlapped=0x0) returned 1 [0114.468] WriteFile (in: hFile=0x2fc, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x250, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x250, lpOverlapped=0x0) returned 1 [0114.471] WriteFile (in: hFile=0x2fc, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x112, lpOverlapped=0x0) returned 1 [0114.472] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0114.472] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0114.472] WriteFile (in: hFile=0x2f8, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x241, lpNumberOfBytesWritten=0x2defb0c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defb0c*=0x241, lpOverlapped=0x0) returned 1 [0114.472] FlushFileBuffers (hFile=0x2f8) returned 1 [0114.479] FlushFileBuffers (hFile=0x2fc) returned 1 [0114.520] CloseHandle (hObject=0x2f8) returned 1 [0114.522] CloseHandle (hObject=0x2fc) returned 1 [0114.522] DeleteFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd")) returned 1 [0114.525] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0114.529] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x2defdd8 | out: lpFileSize=0x2defdd8*=307) returned 1 [0114.530] CloseHandle (hObject=0x2fc) returned 1 [0114.530] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd")) returned 0x20 [0114.530] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd")) returned 0x20 [0114.530] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0114.530] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0114.530] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0114.531] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0114.531] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2f8 [0114.531] ReadFile (in: hFile=0x2fc, lpBuffer=0x3196020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2defdb4, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesRead=0x2defdb4*=0x133, lpOverlapped=0x0) returned 1 [0114.534] WriteFile (in: hFile=0x2f8, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x140, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x140, lpOverlapped=0x0) returned 1 [0114.536] WriteFile (in: hFile=0x2f8, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x102, lpOverlapped=0x0) returned 1 [0114.549] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0114.549] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0114.549] WriteFile (in: hFile=0x2fc, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x133, lpNumberOfBytesWritten=0x2defb0c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defb0c*=0x133, lpOverlapped=0x0) returned 1 [0114.550] FlushFileBuffers (hFile=0x2fc) returned 1 [0115.001] FlushFileBuffers (hFile=0x2f8) returned 1 [0115.005] CloseHandle (hObject=0x2fc) returned 1 [0115.010] CloseHandle (hObject=0x2f8) returned 1 [0115.011] DeleteFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd")) returned 1 [0115.014] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0115.018] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x2defdd8 | out: lpFileSize=0x2defdd8*=17240) returned 1 [0115.018] CloseHandle (hObject=0x2f8) returned 1 [0115.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll")) returned 0x80 [0115.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll")) returned 0x80 [0115.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\SetupResources.dll.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0115.019] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0115.019] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0115.019] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0115.019] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\SetupResources.dll.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc [0115.020] ReadFile (in: hFile=0x2f8, lpBuffer=0x3196020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2defdb4, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesRead=0x2defdb4*=0x4358, lpOverlapped=0x0) returned 1 [0115.026] WriteFile (in: hFile=0x2fc, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x4360, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x4360, lpOverlapped=0x0) returned 1 [0115.030] WriteFile (in: hFile=0x2fc, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x102, lpOverlapped=0x0) returned 1 [0115.031] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0115.031] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0115.031] WriteFile (in: hFile=0x2f8, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x4358, lpNumberOfBytesWritten=0x2defb0c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defb0c*=0x4358, lpOverlapped=0x0) returned 1 [0115.031] FlushFileBuffers (hFile=0x2f8) returned 1 [0115.061] FlushFileBuffers (hFile=0x2fc) returned 1 [0115.074] CloseHandle (hObject=0x2f8) returned 1 [0115.076] CloseHandle (hObject=0x2fc) returned 1 [0115.080] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll")) returned 1 [0115.083] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0115.084] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x2defdd8 | out: lpFileSize=0x2defdd8*=60816) returned 1 [0115.084] CloseHandle (hObject=0x2fc) returned 1 [0115.084] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml")) returned 0x80 [0115.084] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml")) returned 0x80 [0115.084] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\LocalizedData.xml.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0115.085] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0115.085] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0115.085] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0115.085] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\LocalizedData.xml.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f8 [0115.086] ReadFile (in: hFile=0x2fc, lpBuffer=0x3196020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2defdb4, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesRead=0x2defdb4*=0xed90, lpOverlapped=0x0) returned 1 [0115.098] WriteFile (in: hFile=0x2f8, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0xeda0, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0xeda0, lpOverlapped=0x0) returned 1 [0115.105] WriteFile (in: hFile=0x2f8, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x102, lpOverlapped=0x0) returned 1 [0115.106] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0115.106] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0115.106] WriteFile (in: hFile=0x2fc, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0xed90, lpNumberOfBytesWritten=0x2defb0c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defb0c*=0xed90, lpOverlapped=0x0) returned 1 [0115.108] FlushFileBuffers (hFile=0x2fc) returned 1 [0115.542] FlushFileBuffers (hFile=0x2f8) returned 1 [0115.566] CloseHandle (hObject=0x2fc) returned 1 [0115.570] CloseHandle (hObject=0x2f8) returned 1 [0115.574] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml")) returned 1 [0115.578] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0115.578] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x2defdd8 | out: lpFileSize=0x2defdd8*=80970) returned 1 [0115.578] CloseHandle (hObject=0x2f8) returned 1 [0115.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml")) returned 0x80 [0115.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml")) returned 0x80 [0115.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\LocalizedData.xml.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0115.579] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0115.579] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0115.579] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0115.579] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\LocalizedData.xml.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc [0115.580] ReadFile (in: hFile=0x2f8, lpBuffer=0x3196020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2defdb4, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesRead=0x2defdb4*=0x13c4a, lpOverlapped=0x0) returned 1 [0115.602] WriteFile (in: hFile=0x2fc, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x13c50, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x13c50, lpOverlapped=0x0) returned 1 [0115.608] WriteFile (in: hFile=0x2fc, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x102, lpOverlapped=0x0) returned 1 [0115.608] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0115.609] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0115.609] WriteFile (in: hFile=0x2f8, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x13c4a, lpNumberOfBytesWritten=0x2defb0c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defb0c*=0x13c4a, lpOverlapped=0x0) returned 1 [0115.609] FlushFileBuffers (hFile=0x2f8) returned 1 [0116.109] FlushFileBuffers (hFile=0x2fc) returned 1 [0116.113] CloseHandle (hObject=0x2f8) returned 1 [0116.120] CloseHandle (hObject=0x2fc) returned 1 [0116.125] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml")) returned 1 [0116.405] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a4 [0116.405] GetFileSizeEx (in: hFile=0x2a4, lpFileSize=0x2defdd8 | out: lpFileSize=0x2defdd8*=3314) returned 1 [0116.406] CloseHandle (hObject=0x2a4) returned 1 [0116.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf")) returned 0x80 [0116.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf")) returned 0x80 [0116.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\eula.rtf.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0116.406] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a4 [0116.407] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0116.407] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0116.407] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\eula.rtf.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc [0116.411] ReadFile (in: hFile=0x2a4, lpBuffer=0x3196020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2defdb4, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesRead=0x2defdb4*=0xcf2, lpOverlapped=0x0) returned 1 [0116.416] WriteFile (in: hFile=0x2fc, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0xd00, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0xd00, lpOverlapped=0x0) returned 1 [0116.418] WriteFile (in: hFile=0x2fc, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0xf2, lpOverlapped=0x0) returned 1 [0116.419] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0116.419] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0116.419] WriteFile (in: hFile=0x2a4, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0xcf2, lpNumberOfBytesWritten=0x2defb0c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defb0c*=0xcf2, lpOverlapped=0x0) returned 1 [0116.419] FlushFileBuffers (hFile=0x2a4) returned 1 [0116.424] FlushFileBuffers (hFile=0x2fc) returned 1 [0116.428] CloseHandle (hObject=0x2a4) returned 1 [0116.430] CloseHandle (hObject=0x2fc) returned 1 [0116.431] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf")) returned 1 [0116.435] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0116.435] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x2defdd8 | out: lpFileSize=0x2defdd8*=77748) returned 1 [0116.436] CloseHandle (hObject=0x2fc) returned 1 [0116.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml")) returned 0x80 [0116.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml")) returned 0x80 [0116.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\LocalizedData.xml.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0116.436] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0116.437] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0116.437] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0116.437] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\LocalizedData.xml.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a4 [0116.437] ReadFile (in: hFile=0x2fc, lpBuffer=0x3196020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2defdb4, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesRead=0x2defdb4*=0x12fb4, lpOverlapped=0x0) returned 1 [0116.446] WriteFile (in: hFile=0x2a4, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x12fc0, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x12fc0, lpOverlapped=0x0) returned 1 [0116.452] WriteFile (in: hFile=0x2a4, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x102, lpOverlapped=0x0) returned 1 [0116.453] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0116.453] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0116.454] WriteFile (in: hFile=0x2fc, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x12fb4, lpNumberOfBytesWritten=0x2defb0c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defb0c*=0x12fb4, lpOverlapped=0x0) returned 1 [0116.455] FlushFileBuffers (hFile=0x2fc) returned 1 [0117.015] FlushFileBuffers (hFile=0x2a4) returned 1 [0117.018] CloseHandle (hObject=0x2fc) returned 1 [0117.025] CloseHandle (hObject=0x2a4) returned 1 [0117.030] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml")) returned 1 [0117.035] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a4 [0117.035] GetFileSizeEx (in: hFile=0x2a4, lpFileSize=0x2defdd8 | out: lpFileSize=0x2defdd8*=3419) returned 1 [0117.035] CloseHandle (hObject=0x2a4) returned 1 [0117.035] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf")) returned 0x80 [0117.035] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf")) returned 0x80 [0117.036] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\eula.rtf.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0117.036] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a4 [0117.036] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0117.036] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0117.036] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\eula.rtf.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc [0117.051] ReadFile (in: hFile=0x2a4, lpBuffer=0x3196020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2defdb4, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesRead=0x2defdb4*=0xd5b, lpOverlapped=0x0) returned 1 [0117.737] WriteFile (in: hFile=0x2fc, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0xd60, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0xd60, lpOverlapped=0x0) returned 1 [0117.834] WriteFile (in: hFile=0x2fc, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0xf2, lpOverlapped=0x0) returned 1 [0117.835] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0117.836] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0117.836] WriteFile (in: hFile=0x2a4, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0xd5b, lpNumberOfBytesWritten=0x2defb0c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defb0c*=0xd5b, lpOverlapped=0x0) returned 1 [0117.836] FlushFileBuffers (hFile=0x2a4) returned 1 [0117.845] FlushFileBuffers (hFile=0x2fc) returned 1 [0117.850] CloseHandle (hObject=0x2a4) returned 1 [0117.854] CloseHandle (hObject=0x2fc) returned 1 [0117.856] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf")) returned 1 [0117.859] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0117.861] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x2defdd8 | out: lpFileSize=0x2defdd8*=8876) returned 1 [0117.861] CloseHandle (hObject=0x2fc) returned 1 [0117.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf")) returned 0x80 [0117.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf")) returned 0x80 [0117.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\eula.rtf.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0117.861] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0117.862] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0117.862] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0117.862] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\eula.rtf.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a4 [0117.866] ReadFile (in: hFile=0x2fc, lpBuffer=0x3196020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2defdb4, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesRead=0x2defdb4*=0x22ac, lpOverlapped=0x0) returned 1 [0117.870] WriteFile (in: hFile=0x2a4, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x22b0, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x22b0, lpOverlapped=0x0) returned 1 [0117.873] WriteFile (in: hFile=0x2a4, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0xf2, lpOverlapped=0x0) returned 1 [0117.874] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0117.874] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0117.874] WriteFile (in: hFile=0x2fc, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x22ac, lpNumberOfBytesWritten=0x2defb0c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defb0c*=0x22ac, lpOverlapped=0x0) returned 1 [0117.874] FlushFileBuffers (hFile=0x2fc) returned 1 [0117.880] FlushFileBuffers (hFile=0x2a4) returned 1 [0117.884] CloseHandle (hObject=0x2fc) returned 1 [0117.886] CloseHandle (hObject=0x2a4) returned 1 [0117.887] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf")) returned 1 [0117.890] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a4 [0117.890] GetFileSizeEx (in: hFile=0x2a4, lpFileSize=0x2defdd8 | out: lpFileSize=0x2defdd8*=86284) returned 1 [0117.890] CloseHandle (hObject=0x2a4) returned 1 [0117.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml")) returned 0x80 [0117.891] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml")) returned 0x80 [0117.891] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\LocalizedData.xml.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0117.891] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a4 [0117.891] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0117.891] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0117.892] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\LocalizedData.xml.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc [0117.892] ReadFile (in: hFile=0x2a4, lpBuffer=0x3196020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2defdb4, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesRead=0x2defdb4*=0x1510c, lpOverlapped=0x0) returned 1 [0117.899] WriteFile (in: hFile=0x2fc, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x15110, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x15110, lpOverlapped=0x0) returned 1 [0117.905] WriteFile (in: hFile=0x2fc, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x102, lpOverlapped=0x0) returned 1 [0117.905] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0117.905] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0117.905] WriteFile (in: hFile=0x2a4, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x1510c, lpNumberOfBytesWritten=0x2defb0c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defb0c*=0x1510c, lpOverlapped=0x0) returned 1 [0117.907] FlushFileBuffers (hFile=0x2a4) returned 1 [0118.715] FlushFileBuffers (hFile=0x2fc) returned 1 [0118.719] CloseHandle (hObject=0x2a4) returned 1 [0118.726] CloseHandle (hObject=0x2fc) returned 1 [0118.732] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml")) returned 1 [0118.738] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0118.739] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x2defdd8 | out: lpFileSize=0x2defdd8*=19288) returned 1 [0118.739] CloseHandle (hObject=0x2fc) returned 1 [0118.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll")) returned 0x80 [0118.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll")) returned 0x80 [0118.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\SetupResources.dll.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0118.739] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0118.740] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0118.740] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0118.740] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\SetupResources.dll.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a4 [0118.741] ReadFile (in: hFile=0x2fc, lpBuffer=0x3196020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2defdb4, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesRead=0x2defdb4*=0x4b58, lpOverlapped=0x0) returned 1 [0118.747] WriteFile (in: hFile=0x2a4, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x4b60, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x4b60, lpOverlapped=0x0) returned 1 [0118.752] WriteFile (in: hFile=0x2a4, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x102, lpOverlapped=0x0) returned 1 [0118.752] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0118.752] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0118.752] WriteFile (in: hFile=0x2fc, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x4b58, lpNumberOfBytesWritten=0x2defb0c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defb0c*=0x4b58, lpOverlapped=0x0) returned 1 [0118.753] FlushFileBuffers (hFile=0x2fc) returned 1 [0119.243] FlushFileBuffers (hFile=0x2a4) returned 1 [0119.250] CloseHandle (hObject=0x2fc) returned 1 [0119.251] CloseHandle (hObject=0x2a4) returned 1 [0119.254] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll")) returned 1 [0119.513] SetEvent (hEvent=0x2b8) returned 1 [0119.513] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0119.513] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x2defdd8 | out: lpFileSize=0x2defdd8*=17240) returned 1 [0119.514] CloseHandle (hObject=0x2f4) returned 1 [0119.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll")) returned 0x80 [0119.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll")) returned 0x80 [0119.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\SetupResources.dll.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0119.514] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0119.514] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0119.515] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0119.515] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\SetupResources.dll.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f0 [0119.515] ReadFile (in: hFile=0x2f4, lpBuffer=0x3196020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2defdb4, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesRead=0x2defdb4*=0x4358, lpOverlapped=0x0) returned 1 [0119.522] WriteFile (in: hFile=0x2f0, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x4360, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x4360, lpOverlapped=0x0) returned 1 [0119.525] WriteFile (in: hFile=0x2f0, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x102, lpOverlapped=0x0) returned 1 [0119.525] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0119.526] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0119.526] WriteFile (in: hFile=0x2f4, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x4358, lpNumberOfBytesWritten=0x2defb0c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defb0c*=0x4358, lpOverlapped=0x0) returned 1 [0119.526] FlushFileBuffers (hFile=0x2f4) returned 1 [0120.047] FlushFileBuffers (hFile=0x2f0) returned 1 [0120.055] CloseHandle (hObject=0x2f4) returned 1 [0120.059] CloseHandle (hObject=0x2f0) returned 1 [0120.061] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll")) returned 1 [0120.066] SetEvent (hEvent=0x2b8) returned 1 [0120.066] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0120.067] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x2defdd8 | out: lpFileSize=0x2defdd8*=18264) returned 1 [0120.067] CloseHandle (hObject=0x2f0) returned 1 [0120.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll")) returned 0x80 [0120.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll")) returned 0x80 [0120.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\SetupResources.dll.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0120.068] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0120.068] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0120.068] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0120.068] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\SetupResources.dll.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f4 [0120.069] ReadFile (in: hFile=0x2f0, lpBuffer=0x3196020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2defdb4, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesRead=0x2defdb4*=0x4758, lpOverlapped=0x0) returned 1 [0120.080] WriteFile (in: hFile=0x2f4, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x4760, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x4760, lpOverlapped=0x0) returned 1 [0120.084] WriteFile (in: hFile=0x2f4, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x102, lpOverlapped=0x0) returned 1 [0120.084] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0120.084] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0120.084] WriteFile (in: hFile=0x2f0, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x4758, lpNumberOfBytesWritten=0x2defb0c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defb0c*=0x4758, lpOverlapped=0x0) returned 1 [0120.085] FlushFileBuffers (hFile=0x2f0) returned 1 [0120.563] FlushFileBuffers (hFile=0x2f4) returned 1 [0120.568] CloseHandle (hObject=0x2f0) returned 1 [0120.570] CloseHandle (hObject=0x2f4) returned 1 [0120.572] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll")) returned 1 [0120.576] SetEvent (hEvent=0x2b8) returned 1 [0120.576] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0120.577] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x2defdd8 | out: lpFileSize=0x2defdd8*=18776) returned 1 [0120.577] CloseHandle (hObject=0x2f4) returned 1 [0120.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll")) returned 0x80 [0120.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll")) returned 0x80 [0120.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\SetupResources.dll.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0120.578] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0120.578] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0120.578] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0120.578] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\SetupResources.dll.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f0 [0120.579] ReadFile (in: hFile=0x2f4, lpBuffer=0x3196020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2defdb4, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesRead=0x2defdb4*=0x4958, lpOverlapped=0x0) returned 1 [0120.586] WriteFile (in: hFile=0x2f0, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x4960, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x4960, lpOverlapped=0x0) returned 1 [0120.589] WriteFile (in: hFile=0x2f0, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x102, lpOverlapped=0x0) returned 1 [0120.590] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0120.590] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0120.590] WriteFile (in: hFile=0x2f4, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x4958, lpNumberOfBytesWritten=0x2defb0c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defb0c*=0x4958, lpOverlapped=0x0) returned 1 [0120.591] FlushFileBuffers (hFile=0x2f4) returned 1 [0120.645] FlushFileBuffers (hFile=0x2f0) returned 1 [0120.651] CloseHandle (hObject=0x2f4) returned 1 [0120.652] CloseHandle (hObject=0x2f0) returned 1 [0120.656] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll")) returned 1 [0120.659] SetEvent (hEvent=0x2b8) returned 1 [0120.660] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0120.662] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x2defdd8 | out: lpFileSize=0x2defdd8*=72076) returned 1 [0120.663] CloseHandle (hObject=0x2f0) returned 1 [0120.663] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml")) returned 0x80 [0120.663] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml")) returned 0x80 [0120.663] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\LocalizedData.xml.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0120.663] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0120.663] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0120.664] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0120.664] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\LocalizedData.xml.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f4 [0120.664] ReadFile (in: hFile=0x2f0, lpBuffer=0x3196020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2defdb4, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesRead=0x2defdb4*=0x1198c, lpOverlapped=0x0) returned 1 [0120.683] WriteFile (in: hFile=0x2f4, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x11990, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x11990, lpOverlapped=0x0) returned 1 [0120.689] WriteFile (in: hFile=0x2f4, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x102, lpOverlapped=0x0) returned 1 [0120.690] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0120.690] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0120.690] WriteFile (in: hFile=0x2f0, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x1198c, lpNumberOfBytesWritten=0x2defb0c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defb0c*=0x1198c, lpOverlapped=0x0) returned 1 [0120.691] FlushFileBuffers (hFile=0x2f0) returned 1 [0120.965] FlushFileBuffers (hFile=0x2f4) returned 1 [0120.969] CloseHandle (hObject=0x2f0) returned 1 [0120.974] CloseHandle (hObject=0x2f4) returned 1 [0120.979] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml")) returned 1 [0120.983] SetEvent (hEvent=0x2b8) returned 1 [0120.983] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0120.983] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x2defdd8 | out: lpFileSize=0x2defdd8*=4254) returned 1 [0120.984] CloseHandle (hObject=0x2f4) returned 1 [0120.984] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf")) returned 0x80 [0120.984] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf")) returned 0x80 [0120.984] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\eula.rtf.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0120.984] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0120.984] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0120.985] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0120.985] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\eula.rtf.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f0 [0120.989] ReadFile (in: hFile=0x2f4, lpBuffer=0x3196020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2defdb4, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesRead=0x2defdb4*=0x109e, lpOverlapped=0x0) returned 1 [0121.238] WriteFile (in: hFile=0x2f0, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x10a0, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x10a0, lpOverlapped=0x0) returned 1 [0121.242] WriteFile (in: hFile=0x2f0, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0xf2, lpOverlapped=0x0) returned 1 [0121.243] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0121.243] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0121.244] WriteFile (in: hFile=0x2f4, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x109e, lpNumberOfBytesWritten=0x2defb0c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defb0c*=0x109e, lpOverlapped=0x0) returned 1 [0121.244] FlushFileBuffers (hFile=0x2f4) returned 1 [0121.617] FlushFileBuffers (hFile=0x2f0) returned 1 [0121.621] CloseHandle (hObject=0x2f4) returned 1 [0121.624] CloseHandle (hObject=0x2f0) returned 1 [0121.624] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf")) returned 1 [0121.629] SetEvent (hEvent=0x2b8) returned 1 [0121.630] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0121.632] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x2defdd8 | out: lpFileSize=0x2defdd8*=18776) returned 1 [0121.632] CloseHandle (hObject=0x2f0) returned 1 [0121.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll")) returned 0x80 [0121.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll")) returned 0x80 [0121.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\SetupResources.dll.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0121.633] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0121.633] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0121.634] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0121.634] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\SetupResources.dll.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f4 [0121.634] ReadFile (in: hFile=0x2f0, lpBuffer=0x3196020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2defdb4, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesRead=0x2defdb4*=0x4958, lpOverlapped=0x0) returned 1 [0121.639] WriteFile (in: hFile=0x2f4, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x4960, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x4960, lpOverlapped=0x0) returned 1 [0121.643] WriteFile (in: hFile=0x2f4, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x102, lpOverlapped=0x0) returned 1 [0121.643] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0121.643] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0121.643] WriteFile (in: hFile=0x2f0, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x4958, lpNumberOfBytesWritten=0x2defb0c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defb0c*=0x4958, lpOverlapped=0x0) returned 1 [0121.644] FlushFileBuffers (hFile=0x2f0) returned 1 [0122.293] FlushFileBuffers (hFile=0x2f4) returned 1 [0122.301] CloseHandle (hObject=0x2f0) returned 1 [0122.302] CloseHandle (hObject=0x2f4) returned 1 [0122.304] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll")) returned 1 [0122.308] SetEvent (hEvent=0x2b8) returned 1 [0122.308] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0122.310] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x2defdd8 | out: lpFileSize=0x2defdd8*=18264) returned 1 [0122.310] CloseHandle (hObject=0x2f4) returned 1 [0122.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll")) returned 0x80 [0122.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll")) returned 0x80 [0122.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\SetupResources.dll.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0122.310] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0122.310] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0122.311] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0122.311] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\SetupResources.dll.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f0 [0122.311] ReadFile (in: hFile=0x2f4, lpBuffer=0x3196020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2defdb4, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesRead=0x2defdb4*=0x4758, lpOverlapped=0x0) returned 1 [0122.318] WriteFile (in: hFile=0x2f0, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x4760, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x4760, lpOverlapped=0x0) returned 1 [0122.321] WriteFile (in: hFile=0x2f0, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x102, lpOverlapped=0x0) returned 1 [0122.321] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0122.321] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0122.322] WriteFile (in: hFile=0x2f4, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x4758, lpNumberOfBytesWritten=0x2defb0c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defb0c*=0x4758, lpOverlapped=0x0) returned 1 [0122.322] FlushFileBuffers (hFile=0x2f4) returned 1 [0122.919] FlushFileBuffers (hFile=0x2f0) returned 1 [0122.928] CloseHandle (hObject=0x2f4) returned 1 [0122.930] CloseHandle (hObject=0x2f0) returned 1 [0122.932] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll")) returned 1 [0122.936] SetEvent (hEvent=0x2b8) returned 1 [0122.936] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0122.937] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x2defdd8 | out: lpFileSize=0x2defdd8*=68226) returned 1 [0122.937] CloseHandle (hObject=0x2f0) returned 1 [0122.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml")) returned 0x80 [0122.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml")) returned 0x80 [0122.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\LocalizedData.xml.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0122.957] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a4 [0122.957] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0122.957] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0122.958] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\LocalizedData.xml.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc [0122.958] ReadFile (in: hFile=0x2a4, lpBuffer=0x3196020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2defdb4, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesRead=0x2defdb4*=0x10a82, lpOverlapped=0x0) returned 1 [0122.971] WriteFile (in: hFile=0x2fc, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x10a90, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x10a90, lpOverlapped=0x0) returned 1 [0122.977] WriteFile (in: hFile=0x2fc, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x102, lpOverlapped=0x0) returned 1 [0122.977] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0122.977] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0122.978] WriteFile (in: hFile=0x2a4, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x10a82, lpNumberOfBytesWritten=0x2defb0c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defb0c*=0x10a82, lpOverlapped=0x0) returned 1 [0122.978] FlushFileBuffers (hFile=0x2a4) returned 1 [0122.993] FlushFileBuffers (hFile=0x2fc) returned 1 [0122.997] CloseHandle (hObject=0x2a4) returned 1 [0123.005] CloseHandle (hObject=0x2fc) returned 1 [0123.009] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml")) returned 1 [0123.014] SetEvent (hEvent=0x2b8) returned 1 [0123.017] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0123.017] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x2defdd8 | out: lpFileSize=0x2defdd8*=12687) returned 1 [0123.017] CloseHandle (hObject=0x2fc) returned 1 [0123.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf")) returned 0x80 [0123.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf")) returned 0x80 [0123.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\eula.rtf.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0123.018] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0123.018] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0123.018] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0123.018] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\eula.rtf.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a4 [0123.023] ReadFile (in: hFile=0x2fc, lpBuffer=0x3196020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2defdb4, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesRead=0x2defdb4*=0x318f, lpOverlapped=0x0) returned 1 [0123.027] WriteFile (in: hFile=0x2a4, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x3190, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x3190, lpOverlapped=0x0) returned 1 [0123.032] WriteFile (in: hFile=0x2a4, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0xf2, lpOverlapped=0x0) returned 1 [0123.033] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0123.033] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0123.033] WriteFile (in: hFile=0x2fc, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x318f, lpNumberOfBytesWritten=0x2defb0c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defb0c*=0x318f, lpOverlapped=0x0) returned 1 [0123.033] FlushFileBuffers (hFile=0x2fc) returned 1 [0123.039] FlushFileBuffers (hFile=0x2a4) returned 1 [0123.042] CloseHandle (hObject=0x2fc) returned 1 [0123.049] CloseHandle (hObject=0x2a4) returned 1 [0123.052] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf")) returned 1 [0123.056] SetEvent (hEvent=0x2b8) returned 1 [0123.056] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a4 [0123.057] GetFileSizeEx (in: hFile=0x2a4, lpFileSize=0x2defdd8 | out: lpFileSize=0x2defdd8*=65238) returned 1 [0123.057] CloseHandle (hObject=0x2a4) returned 1 [0123.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml")) returned 0x80 [0123.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml")) returned 0x80 [0123.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\LocalizedData.xml.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0123.057] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a4 [0123.058] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0123.058] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0123.058] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\LocalizedData.xml.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc [0123.058] ReadFile (in: hFile=0x2a4, lpBuffer=0x3196020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2defdb4, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesRead=0x2defdb4*=0xfed6, lpOverlapped=0x0) returned 1 [0123.065] WriteFile (in: hFile=0x2fc, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0xfee0, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0xfee0, lpOverlapped=0x0) returned 1 [0123.072] WriteFile (in: hFile=0x2fc, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x102, lpOverlapped=0x0) returned 1 [0123.072] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0123.072] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0123.072] WriteFile (in: hFile=0x2a4, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0xfed6, lpNumberOfBytesWritten=0x2defb0c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defb0c*=0xfed6, lpOverlapped=0x0) returned 1 [0123.073] FlushFileBuffers (hFile=0x2a4) returned 1 [0123.470] FlushFileBuffers (hFile=0x2fc) returned 1 [0123.477] CloseHandle (hObject=0x2a4) returned 1 [0123.531] CloseHandle (hObject=0x2fc) returned 1 [0123.539] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml")) returned 1 [0123.543] SetEvent (hEvent=0x2b8) returned 1 [0123.544] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0123.546] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x2defdd8 | out: lpFileSize=0x2defdd8*=3546) returned 1 [0123.546] CloseHandle (hObject=0x2fc) returned 1 [0123.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf")) returned 0x80 [0123.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf")) returned 0x80 [0123.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\eula.rtf.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0123.547] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0123.547] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0123.548] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0123.548] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\eula.rtf.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f0 [0123.833] ReadFile (in: hFile=0x2fc, lpBuffer=0x3196020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2defdb4, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesRead=0x2defdb4*=0xdda, lpOverlapped=0x0) returned 1 [0123.837] WriteFile (in: hFile=0x2f0, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0xde0, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0xde0, lpOverlapped=0x0) returned 1 [0123.840] WriteFile (in: hFile=0x2f0, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0xf2, lpOverlapped=0x0) returned 1 [0123.840] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0123.841] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0123.841] WriteFile (in: hFile=0x2fc, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0xdda, lpNumberOfBytesWritten=0x2defb0c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defb0c*=0xdda, lpOverlapped=0x0) returned 1 [0123.841] FlushFileBuffers (hFile=0x2fc) returned 1 [0123.846] FlushFileBuffers (hFile=0x2f0) returned 1 [0123.854] CloseHandle (hObject=0x2fc) returned 1 [0123.856] CloseHandle (hObject=0x2f0) returned 1 [0123.857] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf")) returned 1 [0123.860] SetEvent (hEvent=0x2b8) returned 1 [0123.860] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0123.862] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x2defdd8 | out: lpFileSize=0x2defdd8*=79634) returned 1 [0123.863] CloseHandle (hObject=0x2f0) returned 1 [0123.863] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml")) returned 0x80 [0123.863] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml")) returned 0x80 [0123.863] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\LocalizedData.xml.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0123.863] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0123.863] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0123.864] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0123.864] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\LocalizedData.xml.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc [0123.864] ReadFile (in: hFile=0x2f0, lpBuffer=0x3196020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2defdb4, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesRead=0x2defdb4*=0x13712, lpOverlapped=0x0) returned 1 [0123.871] WriteFile (in: hFile=0x2fc, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x13720, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x13720, lpOverlapped=0x0) returned 1 [0123.880] WriteFile (in: hFile=0x2fc, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x102, lpOverlapped=0x0) returned 1 [0123.880] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0123.880] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0123.880] WriteFile (in: hFile=0x2f0, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x13712, lpNumberOfBytesWritten=0x2defb0c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defb0c*=0x13712, lpOverlapped=0x0) returned 1 [0123.881] FlushFileBuffers (hFile=0x2f0) returned 1 [0124.213] FlushFileBuffers (hFile=0x2fc) returned 1 [0124.217] CloseHandle (hObject=0x2f0) returned 1 [0124.223] CloseHandle (hObject=0x2fc) returned 1 [0124.228] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml")) returned 1 [0124.232] SetEvent (hEvent=0x2b8) returned 1 [0124.232] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0124.233] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x2defdd8 | out: lpFileSize=0x2defdd8*=3046) returned 1 [0124.233] CloseHandle (hObject=0x2fc) returned 1 [0124.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf")) returned 0x80 [0124.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf")) returned 0x80 [0124.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\eula.rtf.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0124.234] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0124.234] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0124.234] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0124.234] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\eula.rtf.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f0 [0124.241] ReadFile (in: hFile=0x2fc, lpBuffer=0x3196020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2defdb4, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesRead=0x2defdb4*=0xbe6, lpOverlapped=0x0) returned 1 [0124.262] WriteFile (in: hFile=0x2f0, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0xbf0, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0xbf0, lpOverlapped=0x0) returned 1 [0124.265] WriteFile (in: hFile=0x2f0, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0xf2, lpOverlapped=0x0) returned 1 [0124.265] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0124.266] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0124.266] WriteFile (in: hFile=0x2fc, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0xbe6, lpNumberOfBytesWritten=0x2defb0c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defb0c*=0xbe6, lpOverlapped=0x0) returned 1 [0124.266] FlushFileBuffers (hFile=0x2fc) returned 1 [0124.272] FlushFileBuffers (hFile=0x2f0) returned 1 [0124.275] CloseHandle (hObject=0x2fc) returned 1 [0124.280] CloseHandle (hObject=0x2f0) returned 1 [0124.284] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf")) returned 1 [0124.287] SetEvent (hEvent=0x2b8) returned 1 [0124.288] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0124.288] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x2defdd8 | out: lpFileSize=0x2defdd8*=79296) returned 1 [0124.288] CloseHandle (hObject=0x2f0) returned 1 [0124.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml")) returned 0x80 [0124.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml")) returned 0x80 [0124.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\LocalizedData.xml.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0124.289] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0124.289] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0124.289] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0124.289] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\LocalizedData.xml.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc [0124.290] ReadFile (in: hFile=0x2f0, lpBuffer=0x3196020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2defdb4, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesRead=0x2defdb4*=0x135c0, lpOverlapped=0x0) returned 1 [0124.296] WriteFile (in: hFile=0x2fc, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x135d0, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x135d0, lpOverlapped=0x0) returned 1 [0124.303] WriteFile (in: hFile=0x2fc, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x102, lpOverlapped=0x0) returned 1 [0124.303] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0124.303] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0124.303] WriteFile (in: hFile=0x2f0, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x135c0, lpNumberOfBytesWritten=0x2defb0c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defb0c*=0x135c0, lpOverlapped=0x0) returned 1 [0124.305] FlushFileBuffers (hFile=0x2f0) returned 1 [0124.848] FlushFileBuffers (hFile=0x2fc) returned 1 [0124.852] CloseHandle (hObject=0x2f0) returned 1 [0124.857] CloseHandle (hObject=0x2fc) returned 1 [0124.861] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml")) returned 1 [0124.865] SetEvent (hEvent=0x2b8) returned 1 [0124.866] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0124.866] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x2defdd8 | out: lpFileSize=0x2defdd8*=4040) returned 1 [0124.866] CloseHandle (hObject=0x2fc) returned 1 [0124.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf")) returned 0x80 [0124.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf")) returned 0x80 [0124.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\eula.rtf.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0124.867] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0124.867] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0124.867] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0124.868] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\eula.rtf.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f0 [0124.876] ReadFile (in: hFile=0x2fc, lpBuffer=0x3196020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2defdb4, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesRead=0x2defdb4*=0xfc8, lpOverlapped=0x0) returned 1 [0124.881] WriteFile (in: hFile=0x2f0, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0xfd0, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0xfd0, lpOverlapped=0x0) returned 1 [0124.884] WriteFile (in: hFile=0x2f0, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0xf2, lpOverlapped=0x0) returned 1 [0124.884] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0124.884] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0124.885] WriteFile (in: hFile=0x2fc, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0xfc8, lpNumberOfBytesWritten=0x2defb0c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defb0c*=0xfc8, lpOverlapped=0x0) returned 1 [0124.885] FlushFileBuffers (hFile=0x2fc) returned 1 [0124.898] FlushFileBuffers (hFile=0x2f0) returned 1 [0124.902] CloseHandle (hObject=0x2fc) returned 1 [0124.903] CloseHandle (hObject=0x2f0) returned 1 [0124.904] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf")) returned 1 [0124.907] SetEvent (hEvent=0x2b8) returned 1 [0124.908] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0124.908] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x2defdd8 | out: lpFileSize=0x2defdd8*=82374) returned 1 [0124.908] CloseHandle (hObject=0x2f0) returned 1 [0124.908] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml")) returned 0x80 [0124.908] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml")) returned 0x80 [0124.908] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\LocalizedData.xml.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0124.909] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0124.909] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0124.909] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0124.909] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\LocalizedData.xml.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc [0124.909] ReadFile (in: hFile=0x2f0, lpBuffer=0x3196020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2defdb4, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesRead=0x2defdb4*=0x141c6, lpOverlapped=0x0) returned 1 [0124.922] WriteFile (in: hFile=0x2fc, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x141d0, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x141d0, lpOverlapped=0x0) returned 1 [0124.928] WriteFile (in: hFile=0x2fc, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x102, lpOverlapped=0x0) returned 1 [0124.928] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0124.928] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0124.929] WriteFile (in: hFile=0x2f0, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x141c6, lpNumberOfBytesWritten=0x2defb0c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defb0c*=0x141c6, lpOverlapped=0x0) returned 1 [0124.929] FlushFileBuffers (hFile=0x2f0) returned 1 [0125.649] FlushFileBuffers (hFile=0x2fc) returned 1 [0125.653] CloseHandle (hObject=0x2f0) returned 1 [0125.660] CloseHandle (hObject=0x2fc) returned 1 [0125.666] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml")) returned 1 [0125.671] SetEvent (hEvent=0x2b8) returned 1 [0125.671] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0125.672] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x2defdd8 | out: lpFileSize=0x2defdd8*=3683) returned 1 [0125.672] CloseHandle (hObject=0x2fc) returned 1 [0125.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf")) returned 0x80 [0125.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf")) returned 0x80 [0125.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\eula.rtf.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0125.673] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0125.673] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0125.673] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0125.673] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\eula.rtf.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f0 [0125.679] ReadFile (in: hFile=0x2fc, lpBuffer=0x3196020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2defdb4, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesRead=0x2defdb4*=0xe63, lpOverlapped=0x0) returned 1 [0125.688] WriteFile (in: hFile=0x2f0, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0xe70, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0xe70, lpOverlapped=0x0) returned 1 [0125.848] WriteFile (in: hFile=0x2f0, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0xf2, lpOverlapped=0x0) returned 1 [0125.853] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0125.855] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0125.855] WriteFile (in: hFile=0x2fc, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0xe63, lpNumberOfBytesWritten=0x2defb0c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defb0c*=0xe63, lpOverlapped=0x0) returned 1 [0125.856] FlushFileBuffers (hFile=0x2fc) returned 1 [0125.902] FlushFileBuffers (hFile=0x2f0) returned 1 [0125.907] CloseHandle (hObject=0x2fc) returned 1 [0125.912] CloseHandle (hObject=0x2f0) returned 1 [0125.916] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf")) returned 1 [0125.930] SetEvent (hEvent=0x2b8) returned 1 [0125.930] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0125.931] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x2defdd8 | out: lpFileSize=0x2defdd8*=18264) returned 1 [0125.931] CloseHandle (hObject=0x2f0) returned 1 [0125.932] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll")) returned 0x80 [0125.932] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll")) returned 0x80 [0125.932] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\SetupResources.dll.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0125.932] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0125.932] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0125.933] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0125.933] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\SetupResources.dll.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc [0125.934] ReadFile (in: hFile=0x2f0, lpBuffer=0x3196020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2defdb4, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesRead=0x2defdb4*=0x4758, lpOverlapped=0x0) returned 1 [0125.942] WriteFile (in: hFile=0x2fc, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x4760, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x4760, lpOverlapped=0x0) returned 1 [0125.946] WriteFile (in: hFile=0x2fc, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x102, lpOverlapped=0x0) returned 1 [0125.947] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0125.947] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0125.947] WriteFile (in: hFile=0x2f0, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x4758, lpNumberOfBytesWritten=0x2defb0c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defb0c*=0x4758, lpOverlapped=0x0) returned 1 [0125.948] FlushFileBuffers (hFile=0x2f0) returned 1 [0127.916] FlushFileBuffers (hFile=0x2fc) returned 1 [0128.030] CloseHandle (hObject=0x2f0) returned 1 [0128.031] CloseHandle (hObject=0x2fc) returned 1 [0128.034] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll")) returned 1 [0128.038] SetEvent (hEvent=0x2b8) returned 1 [0128.038] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0128.039] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x2defdd8 | out: lpFileSize=0x2defdd8*=18264) returned 1 [0128.039] CloseHandle (hObject=0x2fc) returned 1 [0128.039] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll")) returned 0x80 [0128.040] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll")) returned 0x80 [0128.040] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\SetupResources.dll.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0128.040] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0128.040] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0128.040] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0128.040] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\SetupResources.dll.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f0 [0128.041] ReadFile (in: hFile=0x2fc, lpBuffer=0x3196020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2defdb4, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesRead=0x2defdb4*=0x4758, lpOverlapped=0x0) returned 1 [0128.048] WriteFile (in: hFile=0x2f0, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x4760, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x4760, lpOverlapped=0x0) returned 1 [0128.053] WriteFile (in: hFile=0x2f0, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x102, lpOverlapped=0x0) returned 1 [0128.053] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0128.053] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0128.053] WriteFile (in: hFile=0x2fc, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x4758, lpNumberOfBytesWritten=0x2defb0c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defb0c*=0x4758, lpOverlapped=0x0) returned 1 [0128.054] FlushFileBuffers (hFile=0x2fc) returned 1 [0130.626] FlushFileBuffers (hFile=0x2f0) returned 1 [0130.630] CloseHandle (hObject=0x2fc) returned 1 [0130.631] CloseHandle (hObject=0x2f0) returned 1 [0130.633] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll")) returned 1 [0130.638] SetEvent (hEvent=0x2b8) returned 1 [0130.638] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0130.641] GetFileSizeEx (in: hFile=0x314, lpFileSize=0x2defdd8 | out: lpFileSize=0x2defdd8*=77680) returned 1 [0130.642] CloseHandle (hObject=0x314) returned 1 [0130.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml")) returned 0x80 [0130.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml")) returned 0x80 [0130.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\LocalizedData.xml.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0130.642] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0130.642] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0130.643] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0130.643] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\LocalizedData.xml.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f0 [0130.643] ReadFile (in: hFile=0x314, lpBuffer=0x3196020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2defdb4, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesRead=0x2defdb4*=0x12f70, lpOverlapped=0x0) returned 1 [0130.651] WriteFile (in: hFile=0x2f0, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x12f80, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x12f80, lpOverlapped=0x0) returned 1 [0130.658] WriteFile (in: hFile=0x2f0, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x102, lpOverlapped=0x0) returned 1 [0130.659] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0130.659] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0130.659] WriteFile (in: hFile=0x314, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x12f70, lpNumberOfBytesWritten=0x2defb0c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defb0c*=0x12f70, lpOverlapped=0x0) returned 1 [0130.660] FlushFileBuffers (hFile=0x314) returned 1 [0131.673] FlushFileBuffers (hFile=0x2f0) returned 1 [0131.676] CloseHandle (hObject=0x314) returned 1 [0131.681] CloseHandle (hObject=0x2f0) returned 1 [0131.688] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml")) returned 1 [0131.693] SetEvent (hEvent=0x2b8) returned 1 [0131.694] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0131.694] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x2defdd8 | out: lpFileSize=0x2defdd8*=3859) returned 1 [0131.695] CloseHandle (hObject=0x2f0) returned 1 [0131.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf")) returned 0x80 [0131.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf")) returned 0x80 [0131.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\eula.rtf.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0131.695] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0131.695] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0131.696] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0131.696] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\eula.rtf.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x314 [0131.775] ReadFile (in: hFile=0x2f0, lpBuffer=0x3196020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2defdb4, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesRead=0x2defdb4*=0xf13, lpOverlapped=0x0) returned 1 [0131.780] WriteFile (in: hFile=0x314, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0xf20, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0xf20, lpOverlapped=0x0) returned 1 [0131.782] WriteFile (in: hFile=0x314, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0xf2, lpOverlapped=0x0) returned 1 [0131.783] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0131.783] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0131.783] WriteFile (in: hFile=0x2f0, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0xf13, lpNumberOfBytesWritten=0x2defb0c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defb0c*=0xf13, lpOverlapped=0x0) returned 1 [0131.783] FlushFileBuffers (hFile=0x2f0) returned 1 [0131.788] FlushFileBuffers (hFile=0x314) returned 1 [0131.791] CloseHandle (hObject=0x2f0) returned 1 [0131.806] CloseHandle (hObject=0x314) returned 1 [0131.808] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf")) returned 1 [0131.813] SetEvent (hEvent=0x2b8) returned 1 [0131.813] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0131.814] GetFileSizeEx (in: hFile=0x314, lpFileSize=0x2defdd8 | out: lpFileSize=0x2defdd8*=76818) returned 1 [0131.814] CloseHandle (hObject=0x314) returned 1 [0131.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml")) returned 0x80 [0131.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml")) returned 0x80 [0131.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\LocalizedData.xml.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0131.814] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0131.815] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0131.815] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0131.815] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\LocalizedData.xml.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f0 [0131.815] ReadFile (in: hFile=0x314, lpBuffer=0x3196020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2defdb4, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesRead=0x2defdb4*=0x12c12, lpOverlapped=0x0) returned 1 [0131.822] WriteFile (in: hFile=0x2f0, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x12c20, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x12c20, lpOverlapped=0x0) returned 1 [0131.829] WriteFile (in: hFile=0x2f0, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x102, lpOverlapped=0x0) returned 1 [0131.829] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0131.830] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0131.830] WriteFile (in: hFile=0x314, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x12c12, lpNumberOfBytesWritten=0x2defb0c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defb0c*=0x12c12, lpOverlapped=0x0) returned 1 [0131.830] FlushFileBuffers (hFile=0x314) returned 1 [0132.872] FlushFileBuffers (hFile=0x2f0) returned 1 [0132.876] CloseHandle (hObject=0x314) returned 1 [0133.383] CloseHandle (hObject=0x2f0) returned 1 [0133.386] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml")) returned 1 [0133.391] SetEvent (hEvent=0x2b8) returned 1 [0133.393] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0133.393] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x2defdd8 | out: lpFileSize=0x2defdd8*=60684) returned 1 [0133.393] CloseHandle (hObject=0x2f0) returned 1 [0133.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml")) returned 0x80 [0133.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml")) returned 0x80 [0133.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\LocalizedData.xml.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0133.394] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0133.394] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0133.394] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0133.394] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\LocalizedData.xml.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x314 [0133.395] ReadFile (in: hFile=0x2f0, lpBuffer=0x3196020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2defdb4, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesRead=0x2defdb4*=0xed0c, lpOverlapped=0x0) returned 1 [0133.409] WriteFile (in: hFile=0x314, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0xed10, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0xed10, lpOverlapped=0x0) returned 1 [0133.686] WriteFile (in: hFile=0x314, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x102, lpOverlapped=0x0) returned 1 [0133.687] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0133.687] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0133.687] WriteFile (in: hFile=0x2f0, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0xed0c, lpNumberOfBytesWritten=0x2defb0c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defb0c*=0xed0c, lpOverlapped=0x0) returned 1 [0133.688] FlushFileBuffers (hFile=0x2f0) returned 1 [0135.335] FlushFileBuffers (hFile=0x314) returned 1 [0135.365] CloseHandle (hObject=0x2f0) returned 1 [0135.373] CloseHandle (hObject=0x314) returned 1 [0135.377] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml")) returned 1 [0135.381] SetEvent (hEvent=0x2b8) returned 1 [0135.381] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0135.386] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x2defdd8 | out: lpFileSize=0x2defdd8*=4015) returned 1 [0135.386] CloseHandle (hObject=0x2f0) returned 1 [0135.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf")) returned 0x80 [0135.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf")) returned 0x80 [0135.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\eula.rtf.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0135.387] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0135.387] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0135.387] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0135.387] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\eula.rtf.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328 [0135.391] ReadFile (in: hFile=0x2f0, lpBuffer=0x3196020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2defdb4, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesRead=0x2defdb4*=0xfaf, lpOverlapped=0x0) returned 1 [0135.401] WriteFile (in: hFile=0x328, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0xfb0, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0xfb0, lpOverlapped=0x0) returned 1 [0135.403] WriteFile (in: hFile=0x328, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0xf2, lpOverlapped=0x0) returned 1 [0135.404] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0135.404] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0135.404] WriteFile (in: hFile=0x2f0, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0xfaf, lpNumberOfBytesWritten=0x2defb0c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defb0c*=0xfaf, lpOverlapped=0x0) returned 1 [0135.404] FlushFileBuffers (hFile=0x2f0) returned 1 [0135.408] FlushFileBuffers (hFile=0x328) returned 1 [0135.411] CloseHandle (hObject=0x2f0) returned 1 [0135.412] CloseHandle (hObject=0x328) returned 1 [0135.413] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf")) returned 1 [0135.417] SetEvent (hEvent=0x2b8) returned 1 [0135.417] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x328 [0135.417] GetFileSizeEx (in: hFile=0x328, lpFileSize=0x2defdd8 | out: lpFileSize=0x2defdd8*=80254) returned 1 [0135.417] CloseHandle (hObject=0x328) returned 1 [0135.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml")) returned 0x80 [0135.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml")) returned 0x80 [0135.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\LocalizedData.xml.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0135.418] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x328 [0135.418] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0135.418] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0135.418] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\LocalizedData.xml.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f0 [0135.419] ReadFile (in: hFile=0x328, lpBuffer=0x3196020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2defdb4, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesRead=0x2defdb4*=0x1397e, lpOverlapped=0x0) returned 1 [0135.429] WriteFile (in: hFile=0x2f0, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x13980, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x13980, lpOverlapped=0x0) returned 1 [0135.437] WriteFile (in: hFile=0x2f0, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x102, lpOverlapped=0x0) returned 1 [0135.437] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0135.437] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0135.437] WriteFile (in: hFile=0x328, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x1397e, lpNumberOfBytesWritten=0x2defb0c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defb0c*=0x1397e, lpOverlapped=0x0) returned 1 [0135.438] FlushFileBuffers (hFile=0x328) returned 1 [0135.995] FlushFileBuffers (hFile=0x2f0) returned 1 [0135.999] CloseHandle (hObject=0x328) returned 1 [0136.001] CloseHandle (hObject=0x2f0) returned 1 [0136.003] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml")) returned 1 [0136.007] SetEvent (hEvent=0x2b8) returned 1 [0136.008] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0136.008] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x2defdd8 | out: lpFileSize=0x2defdd8*=18776) returned 1 [0136.008] CloseHandle (hObject=0x2f0) returned 1 [0136.008] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll")) returned 0x80 [0136.010] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll")) returned 0x80 [0136.010] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\SetupResources.dll.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0136.010] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0136.010] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0136.010] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0136.010] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\SetupResources.dll.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328 [0136.011] ReadFile (in: hFile=0x2f0, lpBuffer=0x3196020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2defdb4, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesRead=0x2defdb4*=0x4958, lpOverlapped=0x0) returned 1 [0136.015] WriteFile (in: hFile=0x328, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x4960, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x4960, lpOverlapped=0x0) returned 1 [0136.016] WriteFile (in: hFile=0x328, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x102, lpOverlapped=0x0) returned 1 [0136.016] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0136.016] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0136.017] WriteFile (in: hFile=0x2f0, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x4958, lpNumberOfBytesWritten=0x2defb0c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defb0c*=0x4958, lpOverlapped=0x0) returned 1 [0136.017] FlushFileBuffers (hFile=0x2f0) returned 1 [0136.798] FlushFileBuffers (hFile=0x328) returned 1 [0136.801] CloseHandle (hObject=0x2f0) returned 1 [0136.802] CloseHandle (hObject=0x328) returned 1 [0136.803] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll")) returned 1 [0136.807] SetEvent (hEvent=0x2b8) returned 1 [0136.807] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x328 [0136.808] GetFileSizeEx (in: hFile=0x328, lpFileSize=0x2defdd8 | out: lpFileSize=0x2defdd8*=60816) returned 1 [0136.808] CloseHandle (hObject=0x328) returned 1 [0136.808] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml")) returned 0x80 [0136.809] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml")) returned 0x80 [0136.809] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\LocalizedData.xml.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0136.809] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x328 [0136.809] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0136.809] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defda0 | out: lpNewFilePointer=0x0) returned 1 [0136.810] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\LocalizedData.xml.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f0 [0136.810] ReadFile (in: hFile=0x328, lpBuffer=0x3196020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2defdb4, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesRead=0x2defdb4*=0xed90, lpOverlapped=0x0) returned 1 [0136.826] WriteFile (in: hFile=0x2f0, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0xeda0, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0xeda0, lpOverlapped=0x0) returned 1 [0136.829] WriteFile (in: hFile=0x2f0, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2defd8c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defd8c*=0x102, lpOverlapped=0x0) returned 1 [0136.829] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0136.830] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2defb00 | out: lpNewFilePointer=0x0) returned 1 [0136.830] WriteFile (in: hFile=0x328, lpBuffer=0x3196020*, nNumberOfBytesToWrite=0xed90, lpNumberOfBytesWritten=0x2defb0c, lpOverlapped=0x0 | out: lpBuffer=0x3196020*, lpNumberOfBytesWritten=0x2defb0c*=0xed90, lpOverlapped=0x0) returned 1 [0136.830] FlushFileBuffers (hFile=0x328) Thread: id = 25 os_tid = 0xee4 [0113.113] GetProcessHeap () returned 0xae0000 [0113.113] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0xb40fc0 [0113.113] GetProcessHeap () returned 0xae0000 [0113.113] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0xbc73a8 [0113.114] GetProcessHeap () returned 0xae0000 [0113.114] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x28) returned 0xb52750 [0113.114] GetProcessHeap () returned 0xae0000 [0113.114] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x110102) returned 0x32b9020 [0113.123] GetProcessHeap () returned 0xae0000 [0113.123] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x50) returned 0xb09bd8 [0113.123] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75e90000 [0113.123] GetProcAddress (hModule=0x75e90000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75ea6b30 [0113.124] Wow64DisableWow64FsRedirection (in: OldValue=0x2f2f970 | out: OldValue=0x2f2f970*=0x0) returned 1 [0113.124] GetProcessHeap () returned 0xae0000 [0113.124] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb09bd8 | out: hHeap=0xae0000) returned 1 [0113.124] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.124] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.124] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.125] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.125] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.125] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.125] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.125] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.126] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.126] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.126] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.126] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.127] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.127] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.127] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.127] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.128] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.128] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.128] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.128] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.129] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.129] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.129] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.129] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.130] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.130] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.130] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.130] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.130] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.131] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.131] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.131] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.131] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.132] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.132] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.132] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.132] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.133] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.133] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.133] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.133] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.134] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.134] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.134] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.134] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.134] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.135] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.136] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.136] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.136] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.136] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.136] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.137] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.137] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.137] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.137] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.138] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.138] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.138] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.138] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.138] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.139] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.139] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.139] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.139] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.140] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.140] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.140] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.140] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.141] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.141] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.141] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.141] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.141] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.142] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.142] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.142] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.142] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.143] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.143] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.143] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.143] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.143] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.144] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.144] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.144] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.144] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.145] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.145] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.145] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.145] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.145] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.146] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.146] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.146] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.146] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.147] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.147] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.147] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.147] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.147] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.148] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.148] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.148] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.148] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.149] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.149] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.149] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.149] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.149] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.150] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.150] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.150] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.150] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.450] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.451] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.451] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.451] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.451] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.452] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.452] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.452] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.452] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.452] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.453] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.453] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.453] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.453] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.454] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.454] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.454] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.454] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.454] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.455] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.455] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.455] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.455] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.456] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.456] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.456] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.456] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.457] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.457] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.457] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.457] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.457] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.458] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.458] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.458] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.458] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.459] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.459] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.459] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.459] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.459] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.460] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.460] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.460] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.460] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.461] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.461] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.461] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.461] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.461] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.462] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.462] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.462] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.462] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.463] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.463] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.464] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.465] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.465] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.465] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.465] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.466] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.466] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.466] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.466] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.467] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.467] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.467] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.467] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.468] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.468] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.468] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.468] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.469] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.469] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.469] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.469] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.470] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.470] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.470] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.470] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.471] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.471] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.471] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.471] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.472] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.472] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.472] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.472] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.472] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.473] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.473] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.473] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.473] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.474] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.474] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.474] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.474] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.475] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.475] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.475] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.475] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.476] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.476] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.476] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.476] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.477] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.477] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.477] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.477] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.477] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.478] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.478] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.478] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.478] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.479] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.479] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.479] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.480] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.480] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.480] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.480] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.480] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.481] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.481] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.481] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.481] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.482] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.482] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.482] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.482] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.483] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.483] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.483] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.483] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0130.876] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f2f8e0 | out: lpNewFilePointer=0x0) returned 1 [0130.876] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f2f8e0 | out: lpNewFilePointer=0x0) returned 1 [0130.876] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZLIB.ACCDE.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzlib.accde.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x31c [0130.877] ReadFile (in: hFile=0x324, lpBuffer=0x32b9020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f2f8f4, lpOverlapped=0x0 | out: lpBuffer=0x32b9020*, lpNumberOfBytesRead=0x2f2f8f4*=0x110100, lpOverlapped=0x0) returned 1 [0132.020] WriteFile (in: hFile=0x31c, lpBuffer=0x32b9020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x2f2f8cc, lpOverlapped=0x0 | out: lpBuffer=0x32b9020*, lpNumberOfBytesWritten=0x2f2f8cc*=0x110100, lpOverlapped=0x0) returned 1 [0133.186] ReadFile (in: hFile=0x324, lpBuffer=0x32b9020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f2f8f4, lpOverlapped=0x0 | out: lpBuffer=0x32b9020*, lpNumberOfBytesRead=0x2f2f8f4*=0xedf00, lpOverlapped=0x0) returned 1 [0133.581] WriteFile (in: hFile=0x31c, lpBuffer=0x32b9020*, nNumberOfBytesToWrite=0xedf10, lpNumberOfBytesWritten=0x2f2f8cc, lpOverlapped=0x0 | out: lpBuffer=0x32b9020*, lpNumberOfBytesWritten=0x2f2f8cc*=0xedf10, lpOverlapped=0x0) returned 1 [0133.886] WriteFile (in: hFile=0x31c, lpBuffer=0x32b9020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f2f8cc, lpOverlapped=0x0 | out: lpBuffer=0x32b9020*, lpNumberOfBytesWritten=0x2f2f8cc*=0xf2, lpOverlapped=0x0) returned 1 [0133.890] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f2f640 | out: lpNewFilePointer=0x0) returned 1 [0133.890] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f2f640 | out: lpNewFilePointer=0x0) returned 1 [0133.890] WriteFile (in: hFile=0x324, lpBuffer=0x32b9020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x2f2f64c, lpOverlapped=0x0 | out: lpBuffer=0x32b9020*, lpNumberOfBytesWritten=0x2f2f64c*=0x110102, lpOverlapped=0x0) returned 1 [0133.909] WriteFile (in: hFile=0x324, lpBuffer=0x32b9020*, nNumberOfBytesToWrite=0xedefe, lpNumberOfBytesWritten=0x2f2f64c, lpOverlapped=0x0 | out: lpBuffer=0x32b9020*, lpNumberOfBytesWritten=0x2f2f64c*=0xedefe, lpOverlapped=0x0) returned 1 [0133.916] FlushFileBuffers (hFile=0x324) returned 1 [0135.406] FlushFileBuffers (hFile=0x31c) returned 1 [0135.453] CloseHandle (hObject=0x324) returned 1 [0135.453] CloseHandle (hObject=0x31c) returned 1 [0136.838] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZLIB.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzlib.accde")) Thread: id = 26 os_tid = 0xd98 [0113.152] GetProcessHeap () returned 0xae0000 [0113.152] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33d0048 [0113.153] GetProcessHeap () returned 0xae0000 [0113.153] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x10000) returned 0x33e0050 [0113.156] GetProcessHeap () returned 0xae0000 [0113.156] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x28) returned 0xb52690 [0113.156] GetProcessHeap () returned 0xae0000 [0113.156] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x110102) returned 0x34d4020 [0113.164] GetProcessHeap () returned 0xae0000 [0113.164] RtlAllocateHeap (HeapHandle=0xae0000, Flags=0x0, Size=0x50) returned 0xb09760 [0113.165] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75e90000 [0113.165] GetProcAddress (hModule=0x75e90000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75ea6b30 [0113.165] Wow64DisableWow64FsRedirection (in: OldValue=0x306fe20 | out: OldValue=0x306fe20*=0x0) returned 1 [0113.165] GetProcessHeap () returned 0xae0000 [0113.165] HeapFree (in: hHeap=0xae0000, dwFlags=0x0, lpMem=0xb09760 | out: hHeap=0xae0000) returned 1 [0113.165] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.165] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.166] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.166] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.167] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.167] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.168] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.168] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.168] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.168] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.169] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.169] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.169] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.169] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.169] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.170] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.170] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.170] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.170] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.171] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.171] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.171] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.171] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.171] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.172] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.172] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.172] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.172] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.173] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.173] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.173] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.173] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.174] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.174] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.174] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.174] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.174] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.175] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.175] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.175] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.175] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.176] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.176] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.176] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.176] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.176] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.177] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.177] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.177] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.177] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.178] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.178] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.178] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.178] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.178] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.179] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.179] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.179] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.179] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.180] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.180] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.180] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.180] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.181] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.181] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.181] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.181] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.181] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.182] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.182] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.182] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.183] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.183] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.183] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.183] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.184] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.184] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.184] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.184] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.184] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.185] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.185] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.185] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.185] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.186] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.186] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.186] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.186] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.186] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.187] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.187] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.187] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.187] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.188] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.188] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.188] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.188] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.188] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.189] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.189] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.189] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.189] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.190] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.190] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.190] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.190] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.190] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.191] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.191] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.191] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.191] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.192] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.192] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.192] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.192] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.193] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.193] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.193] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.193] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.193] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.194] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.194] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.194] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.194] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.195] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.195] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.195] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.195] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.196] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.196] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.196] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.196] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.196] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.197] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.197] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.197] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.724] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.724] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.724] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.725] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.725] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.725] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.725] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.726] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.726] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.726] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.726] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.726] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.727] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.727] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.727] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.727] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.728] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.728] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.728] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.728] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.728] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.729] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.730] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.730] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.730] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.730] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.731] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.731] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.731] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.731] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.731] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.732] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.732] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.732] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.732] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.733] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.733] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.733] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.733] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.734] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.734] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.734] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.734] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.734] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.735] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.735] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.735] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.735] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.736] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.736] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.736] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.736] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.737] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.737] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.737] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.737] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.738] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.738] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.738] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.738] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.739] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.739] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.739] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.739] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.740] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.740] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.740] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.740] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.740] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.741] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.741] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.741] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.741] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.742] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.742] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.742] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.742] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.743] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.743] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.743] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.743] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.743] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.744] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.744] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.745] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.745] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.745] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.746] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.746] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.746] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.746] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.747] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.747] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.747] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.747] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.747] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.748] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.748] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.748] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.748] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.749] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.749] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.749] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.749] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.750] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.750] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.750] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.750] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.751] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.751] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.751] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.751] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0113.752] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.461] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.461] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.461] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.461] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.461] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.575] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.641] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.657] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.658] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.658] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.677] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.677] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.693] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.693] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.693] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.693] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.693] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.694] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.694] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.694] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.695] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.695] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.695] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.695] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.695] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.695] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.696] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.696] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.696] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.696] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.696] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.696] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.696] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.697] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.697] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.697] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.697] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.697] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.697] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.698] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.698] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.698] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.698] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.698] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.698] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.698] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.699] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.699] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.699] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.699] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.699] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.699] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.700] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.700] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.700] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.700] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.700] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.700] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.700] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.701] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.701] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.701] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.701] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.701] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.701] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.702] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.702] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.702] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.702] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.702] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.702] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.703] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.703] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.703] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.703] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.703] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.703] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.704] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.704] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.704] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.704] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.704] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.704] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.704] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.705] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.705] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.705] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.705] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.705] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.705] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.706] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.706] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.706] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.706] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.706] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.706] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.706] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.707] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.707] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.707] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.707] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.707] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.707] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.708] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.708] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.708] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.708] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.708] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.708] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.709] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.709] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.709] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.709] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.709] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.709] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.709] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.710] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.711] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.711] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.711] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.711] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.711] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.711] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.711] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.712] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.712] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.712] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.712] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.712] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.712] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.713] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.713] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.713] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.713] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.713] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.713] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.713] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.714] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.714] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.714] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.714] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.714] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.714] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.715] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.715] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.715] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.715] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.715] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.715] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.715] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.716] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.716] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.716] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.716] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.716] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.716] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.717] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.717] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.717] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.717] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.717] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.717] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.717] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.718] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.718] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.718] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.718] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.718] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.718] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.718] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.719] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.719] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.719] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.719] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.719] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.719] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.720] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.720] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.720] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.720] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.720] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.720] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.720] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.721] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.721] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.721] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.721] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.721] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.721] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.722] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.722] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.722] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.722] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.722] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.722] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.722] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.723] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.723] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.723] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.723] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.723] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.723] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.724] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.724] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.724] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.724] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.724] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.724] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.724] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.725] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.725] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.725] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0114.725] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.091] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.091] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.092] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.092] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.092] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.092] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.092] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.092] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.093] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.093] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.093] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.093] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.093] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.093] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.094] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.094] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.094] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.094] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.094] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.094] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.095] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.095] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.096] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.096] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.096] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.096] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.096] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.096] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.097] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.097] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.097] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.097] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.097] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.097] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.098] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.098] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.098] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.098] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.098] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.098] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.099] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.099] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.099] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.099] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.099] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.099] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.100] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.100] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.100] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.100] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.100] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.100] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.101] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.101] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.101] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.101] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.101] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.102] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.102] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.102] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.102] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.102] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.103] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.103] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.103] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.103] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.103] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.103] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.104] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.104] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.104] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.104] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.104] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.105] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.105] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.105] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.105] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.105] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.105] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.106] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.106] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.106] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.106] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.106] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.107] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.107] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.107] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.107] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.107] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.108] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.108] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.108] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.108] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.108] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.108] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.109] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.109] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.109] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.109] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.109] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.110] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.110] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.110] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.110] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.110] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.110] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.111] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.111] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.111] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.111] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.114] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.114] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.114] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.114] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.115] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.115] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.115] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.115] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.115] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.116] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.116] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.116] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.116] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.116] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.116] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.116] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.117] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.117] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.117] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.117] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.117] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.118] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.118] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.118] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.118] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.118] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.119] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.119] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.119] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.119] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.119] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.119] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.120] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.120] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.120] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.120] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.120] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.120] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.121] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.121] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.121] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.121] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.121] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.121] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.122] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.122] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.122] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.122] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.122] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.122] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.123] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.123] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.123] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.123] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.123] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.124] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.124] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.124] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.124] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.124] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.124] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.125] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.125] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.125] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.125] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.125] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.125] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.126] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.126] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.126] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.126] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.126] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.126] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.127] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.127] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.127] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.127] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.127] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.128] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.128] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.128] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.128] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.128] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.128] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0121.129] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0127.252] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x306fd90 | out: lpNewFilePointer=0x0) returned 1 [0127.253] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x306fd90 | out: lpNewFilePointer=0x0) returned 1 [0127.253] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DBSAMPLE.MDB.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dbsample.mdb.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x324 [0127.261] ReadFile (in: hFile=0x31c, lpBuffer=0x34d4020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x306fda4, lpOverlapped=0x0 | out: lpBuffer=0x34d4020*, lpNumberOfBytesRead=0x306fda4*=0x7c000, lpOverlapped=0x0) returned 1 [0130.305] WriteFile (in: hFile=0x324, lpBuffer=0x34d4020*, nNumberOfBytesToWrite=0x7c010, lpNumberOfBytesWritten=0x306fd7c, lpOverlapped=0x0 | out: lpBuffer=0x34d4020*, lpNumberOfBytesWritten=0x306fd7c*=0x7c010, lpOverlapped=0x0) returned 1 [0130.792] WriteFile (in: hFile=0x324, lpBuffer=0x34d4020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x306fd7c, lpOverlapped=0x0 | out: lpBuffer=0x34d4020*, lpNumberOfBytesWritten=0x306fd7c*=0xf2, lpOverlapped=0x0) returned 1 [0130.804] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x306faf0 | out: lpNewFilePointer=0x0) returned 1 [0130.805] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x306faf0 | out: lpNewFilePointer=0x0) returned 1 [0130.805] WriteFile (in: hFile=0x31c, lpBuffer=0x34d4020*, nNumberOfBytesToWrite=0x7c000, lpNumberOfBytesWritten=0x306fafc, lpOverlapped=0x0 | out: lpBuffer=0x34d4020*, lpNumberOfBytesWritten=0x306fafc*=0x7c000, lpOverlapped=0x0) returned 1 [0130.811] FlushFileBuffers (hFile=0x31c) returned 1 [0130.820] FlushFileBuffers (hFile=0x324) returned 1 [0130.824] CloseHandle (hObject=0x31c) returned 1 [0130.825] CloseHandle (hObject=0x324) returned 1 [0130.854] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DBSAMPLE.MDB" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dbsample.mdb")) returned 1 [0130.867] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0xffffffff) returned 0x0 [0131.067] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZMAIN.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzmain.accde"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234 [0131.069] GetFileSizeEx (in: hFile=0x234, lpFileSize=0x306fdc8 | out: lpFileSize=0x306fdc8*=9277440) returned 1 [0131.069] CloseHandle (hObject=0x234) returned 1 [0131.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZMAIN.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzmain.accde")) returned 0x220 [0131.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZMAIN.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzmain.accde")) returned 0x220 [0131.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZMAIN.ACCDE.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzmain.accde.id[b4197730-2507].[topot@cock.li].deuce")) returned 0xffffffff [0131.070] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZMAIN.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzmain.accde"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234 [0131.070] SetFilePointerEx (in: hFile=0x234, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x306fd90 | out: lpNewFilePointer=0x0) returned 1 [0131.070] SetFilePointerEx (in: hFile=0x234, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x306fd90 | out: lpNewFilePointer=0x0) returned 1 [0131.070] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZMAIN.ACCDE.id[B4197730-2507].[topot@cock.li].deuce" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzmain.accde.id[b4197730-2507].[topot@cock.li].deuce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x250 [0131.071] ReadFile (in: hFile=0x234, lpBuffer=0x34d4020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x306fda4, lpOverlapped=0x0 | out: lpBuffer=0x34d4020*, lpNumberOfBytesRead=0x306fda4*=0x110100, lpOverlapped=0x0) returned 1 [0132.674] WriteFile (in: hFile=0x250, lpBuffer=0x34d4020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x306fd7c, lpOverlapped=0x0 | out: lpBuffer=0x34d4020*, lpNumberOfBytesWritten=0x306fd7c*=0x110100, lpOverlapped=0x0) returned 1 [0133.129] ReadFile (in: hFile=0x234, lpBuffer=0x34d4020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x306fda4, lpOverlapped=0x0 | out: lpBuffer=0x34d4020*, lpNumberOfBytesRead=0x306fda4*=0x110100, lpOverlapped=0x0) returned 1 [0133.624] WriteFile (in: hFile=0x250, lpBuffer=0x34d4020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x306fd7c, lpOverlapped=0x0 | out: lpBuffer=0x34d4020*, lpNumberOfBytesWritten=0x306fd7c*=0x110100, lpOverlapped=0x0) returned 1 [0133.960] ReadFile (in: hFile=0x234, lpBuffer=0x34d4020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x306fda4, lpOverlapped=0x0 | out: lpBuffer=0x34d4020*, lpNumberOfBytesRead=0x306fda4*=0x110100, lpOverlapped=0x0) returned 1 [0134.683] WriteFile (in: hFile=0x250, lpBuffer=0x34d4020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x306fd7c, lpOverlapped=0x0 | out: lpBuffer=0x34d4020*, lpNumberOfBytesWritten=0x306fd7c*=0x110100, lpOverlapped=0x0) returned 1 [0135.079] ReadFile (in: hFile=0x234, lpBuffer=0x34d4020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x306fda4, lpOverlapped=0x0 | out: lpBuffer=0x34d4020*, lpNumberOfBytesRead=0x306fda4*=0x110100, lpOverlapped=0x0) returned 1 [0136.178] WriteFile (in: hFile=0x250, lpBuffer=0x34d4020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x306fd7c, lpOverlapped=0x0 | out: lpBuffer=0x34d4020*, lpNumberOfBytesWritten=0x306fd7c*=0x110100, lpOverlapped=0x0) returned 1 [0136.541] ReadFile (in: hFile=0x234, lpBuffer=0x34d4020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x306fda4, lpOverlapped=0x0 | out: lpBuffer=0x34d4020*, lpNumberOfBytesRead=0x306fda4*=0x110100, lpOverlapped=0x0) returned 1 [0136.939] WriteFile (hFile=0x250, lpBuffer=0x34d4020, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x306fd7c, lpOverlapped=0x0) Thread: id = 30 os_tid = 0x408 Thread: id = 31 os_tid = 0xcb8 Process: id = "2" image_name = "antirecuvaanddb.exe" filename = "c:\\users\\fd1hvy\\desktop\\antirecuvaanddb.exe" page_root = "0x19887000" os_pid = "0xed4" os_integrity_level = "0x2000" os_privileges = "0x40800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0xf9c" cmd_line = "\"C:\\Users\\FD1HVy\\Desktop\\AntiRecuvaAndDB.exe\"" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103c1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 4 os_tid = 0xd58 [0101.566] GetProcessHeap () returned 0x6e0000 [0101.567] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x30) returned 0x6f5d28 [0101.579] GetProcessHeap () returned 0x6e0000 [0101.579] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x3400) returned 0x6f6420 [0101.579] GetProcessHeap () returned 0x6e0000 [0101.579] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x204) returned 0x6f9828 [0101.581] GetProcessHeap () returned 0x6e0000 [0101.581] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x10) returned 0x6eaa80 [0101.582] GetTickCount () returned 0x11597a8 [0101.582] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x53f5f8 | out: lpWSAData=0x53f5f8) returned 0 [0101.591] GetLocaleInfoW (in: Locale=0x800, LCType=0x58, lpLCData=0x53f5d8, cchData=32 | out: lpLCData="\x03") returned 16 [0101.593] GetProcessHeap () returned 0x6e0000 [0101.593] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x1c) returned 0x6e4718 [0101.593] GetProcessHeap () returned 0x6e0000 [0101.593] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x1c) returned 0x6e4af8 [0101.593] GetVersion () returned 0x23f00206 [0101.593] GetCurrentProcess () returned 0xffffffff [0101.593] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x53f54c | out: TokenHandle=0x53f54c*=0x1ec) returned 1 [0101.593] GetTokenInformation (in: TokenHandle=0x1ec, TokenInformationClass=0x14, TokenInformation=0x53f544, TokenInformationLength=0x4, ReturnLength=0x53f548 | out: TokenInformation=0x53f544, ReturnLength=0x53f548) returned 1 [0101.594] CloseHandle (hObject=0x1ec) returned 1 [0101.594] GetProcessHeap () returned 0x6e0000 [0101.594] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x20) returned 0x6e4428 [0101.594] GetProcessHeap () returned 0x6e0000 [0101.594] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x1e) returned 0x6e2b40 [0101.594] GetProcessHeap () returned 0x6e0000 [0101.594] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x1e) returned 0x6eb088 [0101.594] GetProcessHeap () returned 0x6e0000 [0101.594] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x90) returned 0x6e49f0 [0101.594] GetProcessHeap () returned 0x6e0000 [0101.594] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6e49f0 | out: hHeap=0x6e0000) returned 1 [0101.594] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x6e2b40, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0101.594] GetProcessHeap () returned 0x6e0000 [0101.595] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6eb088 | out: hHeap=0x6e0000) returned 1 [0101.595] GetProcessHeap () returned 0x6e0000 [0101.595] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6e4428 | out: hHeap=0x6e0000) returned 1 [0101.595] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x53f4ec, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x53f4ec*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0101.596] GetProcessHeap () returned 0x6e0000 [0101.596] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6e2b40 | out: hHeap=0x6e0000) returned 1 [0101.596] GetProcessHeap () returned 0x6e0000 [0101.596] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x40) returned 0x6ede80 [0101.596] GetProcessHeap () returned 0x6e0000 [0101.596] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x3a) returned 0x6edec8 [0101.596] GetProcessHeap () returned 0x6e0000 [0101.596] RtlReAllocateHeap (Heap=0x6e0000, Flags=0x0, Ptr=0x6edec8, Size=0x72) returned 0x6e4030 [0101.596] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x0 [0101.596] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000000") returned 0x1ec [0101.596] WaitForSingleObject (hHandle=0x1ec, dwMilliseconds=0x0) returned 0x0 [0101.597] GetProcessHeap () returned 0x6e0000 [0101.597] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6ede80 | out: hHeap=0x6e0000) returned 1 [0101.597] GetProcessHeap () returned 0x6e0000 [0101.597] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6e4030 | out: hHeap=0x6e0000) returned 1 [0101.597] GetProcessHeap () returned 0x6e0000 [0101.597] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x20) returned 0x6e2b40 [0101.597] GetProcessHeap () returned 0x6e0000 [0101.597] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x1e) returned 0x6e4428 [0101.597] GetProcessHeap () returned 0x6e0000 [0101.597] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x1e) returned 0x6eb088 [0101.597] GetProcessHeap () returned 0x6e0000 [0101.597] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x90) returned 0x6e49f0 [0101.597] GetProcessHeap () returned 0x6e0000 [0101.597] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6e49f0 | out: hHeap=0x6e0000) returned 1 [0101.597] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x6e4428, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0101.598] GetProcessHeap () returned 0x6e0000 [0101.598] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6eb088 | out: hHeap=0x6e0000) returned 1 [0101.598] GetProcessHeap () returned 0x6e0000 [0101.598] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6e2b40 | out: hHeap=0x6e0000) returned 1 [0101.598] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x53f4d4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x53f4d4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0101.598] GetProcessHeap () returned 0x6e0000 [0101.598] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6e4428 | out: hHeap=0x6e0000) returned 1 [0101.598] GetProcessHeap () returned 0x6e0000 [0101.598] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x40) returned 0x6edc40 [0101.598] GetProcessHeap () returned 0x6e0000 [0101.598] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x3a) returned 0x6edad8 [0101.599] GetProcessHeap () returned 0x6e0000 [0101.599] RtlReAllocateHeap (Heap=0x6e0000, Flags=0x0, Ptr=0x6edad8, Size=0x72) returned 0x6ff0c8 [0101.599] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x1f0 [0101.599] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0x0) returned 0x102 [0101.600] CloseHandle (hObject=0x1f0) returned 1 [0101.600] GetProcessHeap () returned 0x6e0000 [0101.600] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6edc40 | out: hHeap=0x6e0000) returned 1 [0101.600] GetProcessHeap () returned 0x6e0000 [0101.600] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6ff0c8 | out: hHeap=0x6e0000) returned 1 [0101.600] GetProcessHeap () returned 0x6e0000 [0101.600] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x60) returned 0x6e4030 [0101.600] GetProcessHeap () returned 0x6e0000 [0101.600] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x20) returned 0x6e4428 [0101.600] GetProcessHeap () returned 0x6e0000 [0101.600] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x1e) returned 0x6e2b40 [0101.600] GetProcessHeap () returned 0x6e0000 [0101.600] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x1e) returned 0x6eb088 [0101.600] GetProcessHeap () returned 0x6e0000 [0101.601] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x90) returned 0x6e49f0 [0101.601] GetProcessHeap () returned 0x6e0000 [0101.601] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6e49f0 | out: hHeap=0x6e0000) returned 1 [0101.601] ExpandEnvironmentStringsW (in: lpSrc="%localappdata%", lpDst=0x6e2b40, nSize=0xf | out: lpDst="") returned 0x1e [0101.601] GetProcessHeap () returned 0x6e0000 [0101.601] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6eb088 | out: hHeap=0x6e0000) returned 1 [0101.601] GetProcessHeap () returned 0x6e0000 [0101.601] RtlReAllocateHeap (Heap=0x6e0000, Flags=0x0, Ptr=0x6e2b40, Size=0x3a) returned 0x6e8b18 [0101.601] GetProcessHeap () returned 0x6e0000 [0101.601] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x3a) returned 0x6ee078 [0101.601] GetProcessHeap () returned 0x6e0000 [0101.601] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x90) returned 0x6e49f0 [0101.601] GetProcessHeap () returned 0x6e0000 [0101.601] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6e49f0 | out: hHeap=0x6e0000) returned 1 [0101.601] ExpandEnvironmentStringsW (in: lpSrc="%localappdata%", lpDst=0x6e8b18, nSize=0x1d | out: lpDst="") returned 0x1e [0101.601] GetProcessHeap () returned 0x6e0000 [0101.602] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6ee078 | out: hHeap=0x6e0000) returned 1 [0101.602] GetProcessHeap () returned 0x6e0000 [0101.602] RtlReAllocateHeap (Heap=0x6e0000, Flags=0x0, Ptr=0x6e8b18, Size=0x72) returned 0x6e3df0 [0101.602] GetProcessHeap () returned 0x6e0000 [0101.602] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x72) returned 0x6fee48 [0101.602] GetProcessHeap () returned 0x6e0000 [0101.602] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x90) returned 0x6e49f0 [0101.602] GetProcessHeap () returned 0x6e0000 [0101.602] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6e49f0 | out: hHeap=0x6e0000) returned 1 [0101.602] ExpandEnvironmentStringsW (in: lpSrc="%localappdata%", lpDst=0x6e3df0, nSize=0x39 | out: lpDst="C:\\Users\\FD1HVy\\AppData\\Local") returned 0x1e [0101.602] GetProcessHeap () returned 0x6e0000 [0101.602] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6fee48 | out: hHeap=0x6e0000) returned 1 [0101.602] GetProcessHeap () returned 0x6e0000 [0101.602] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6e4428 | out: hHeap=0x6e0000) returned 1 [0101.602] GetProcessHeap () returned 0x6e0000 [0101.603] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x40) returned 0x6ede80 [0101.603] GetProcessHeap () returned 0x6e0000 [0101.603] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x3e) returned 0x6eda00 [0101.603] GetProcessHeap () returned 0x6e0000 [0101.603] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x3e) returned 0x6edf10 [0101.603] GetProcessHeap () returned 0x6e0000 [0101.603] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x90) returned 0x6e49f0 [0101.603] GetProcessHeap () returned 0x6e0000 [0101.603] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x10) returned 0x6eab10 [0101.603] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x53f42c | out: phkResult=0x53f42c*=0x1f4) returned 0x0 [0101.603] RegQueryValueExW (in: hKey=0x1f4, lpValueName="Startup", lpReserved=0x0, lpType=0x53f428, lpData=0x6edf10, lpcbData=0x53f430*=0x3e | out: lpType=0x53f428*=0x2, lpData=0x6edf10*=0x2e, lpcbData=0x53f430*=0x98) returned 0xea [0101.604] RegCloseKey (hKey=0x1f4) returned 0x0 [0101.604] GetProcessHeap () returned 0x6e0000 [0101.604] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6eab10 | out: hHeap=0x6e0000) returned 1 [0101.604] GetProcessHeap () returned 0x6e0000 [0101.604] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6e49f0 | out: hHeap=0x6e0000) returned 1 [0101.604] GetProcessHeap () returned 0x6e0000 [0101.604] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6edf10 | out: hHeap=0x6e0000) returned 1 [0101.604] GetProcessHeap () returned 0x6e0000 [0101.604] RtlReAllocateHeap (Heap=0x6e0000, Flags=0x0, Ptr=0x6eda00, Size=0x7a) returned 0x6e2de0 [0101.604] GetProcessHeap () returned 0x6e0000 [0101.604] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x7a) returned 0x6e4468 [0101.604] GetProcessHeap () returned 0x6e0000 [0101.604] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x90) returned 0x6e49f0 [0101.604] GetProcessHeap () returned 0x6e0000 [0101.604] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x10) returned 0x6eab10 [0101.605] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x53f42c | out: phkResult=0x53f42c*=0x1f4) returned 0x0 [0101.605] RegQueryValueExW (in: hKey=0x1f4, lpValueName="Startup", lpReserved=0x0, lpType=0x53f428, lpData=0x6e4468, lpcbData=0x53f430*=0x7a | out: lpType=0x53f428*=0x2, lpData=0x6e4468*=0xf0, lpcbData=0x53f430*=0x98) returned 0xea [0101.605] RegCloseKey (hKey=0x1f4) returned 0x0 [0101.605] GetProcessHeap () returned 0x6e0000 [0101.605] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6eab10 | out: hHeap=0x6e0000) returned 1 [0101.605] GetProcessHeap () returned 0x6e0000 [0101.605] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6e49f0 | out: hHeap=0x6e0000) returned 1 [0101.605] GetProcessHeap () returned 0x6e0000 [0101.606] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6e4468 | out: hHeap=0x6e0000) returned 1 [0101.607] GetProcessHeap () returned 0x6e0000 [0101.607] RtlReAllocateHeap (Heap=0x6e0000, Flags=0x0, Ptr=0x6e2de0, Size=0xf2) returned 0x6e9050 [0101.607] GetProcessHeap () returned 0x6e0000 [0101.607] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0xf2) returned 0x6e8e88 [0101.607] GetProcessHeap () returned 0x6e0000 [0101.607] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x90) returned 0x6e49f0 [0101.607] GetProcessHeap () returned 0x6e0000 [0101.607] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x10) returned 0x6eab10 [0101.607] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x53f42c | out: phkResult=0x53f42c*=0x1f4) returned 0x0 [0101.607] RegQueryValueExW (in: hKey=0x1f4, lpValueName="Startup", lpReserved=0x0, lpType=0x53f428, lpData=0x6e8e88, lpcbData=0x53f430*=0xf2 | out: lpType=0x53f428*=0x2, lpData="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x53f430*=0x98) returned 0x0 [0101.607] RegCloseKey (hKey=0x1f4) returned 0x0 [0101.607] GetProcessHeap () returned 0x6e0000 [0101.608] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6eab10 | out: hHeap=0x6e0000) returned 1 [0101.608] GetProcessHeap () returned 0x6e0000 [0101.608] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x1e) returned 0x6e4428 [0101.608] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x53f42c | out: phkResult=0x53f42c*=0x1f4) returned 0x0 [0101.608] RegQueryValueExW (in: hKey=0x1f4, lpValueName="Common Startup", lpReserved=0x0, lpType=0x53f428, lpData=0x6e8f20, lpcbData=0x53f430*=0x5a | out: lpType=0x53f428*=0x0, lpData=0x6e8f20*=0x1a, lpcbData=0x53f430*=0x5a) returned 0x2 [0101.608] RegCloseKey (hKey=0x1f4) returned 0x0 [0101.608] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x53f440 | out: phkResult=0x53f440*=0x1f4) returned 0x0 [0101.608] RegQueryValueExW (in: hKey=0x1f4, lpValueName="Common Startup", lpReserved=0x0, lpType=0x53f43c, lpData=0x6e8f20, lpcbData=0x53f444*=0x5a | out: lpType=0x53f43c*=0x2, lpData=0x6e8f20*=0x1a, lpcbData=0x53f444*=0x78) returned 0xea [0101.608] RegCloseKey (hKey=0x1f4) returned 0x0 [0101.609] GetProcessHeap () returned 0x6e0000 [0101.609] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6e4428 | out: hHeap=0x6e0000) returned 1 [0101.609] GetProcessHeap () returned 0x6e0000 [0101.609] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6e49f0 | out: hHeap=0x6e0000) returned 1 [0101.609] GetProcessHeap () returned 0x6e0000 [0101.609] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6e8e88 | out: hHeap=0x6e0000) returned 1 [0101.609] GetProcessHeap () returned 0x6e0000 [0101.609] RtlReAllocateHeap (Heap=0x6e0000, Flags=0x0, Ptr=0x6e9050, Size=0x1e2) returned 0x6ff3a8 [0101.609] GetProcessHeap () returned 0x6e0000 [0101.609] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x1e2) returned 0x6ff598 [0101.609] GetProcessHeap () returned 0x6e0000 [0101.609] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x90) returned 0x6e49f0 [0101.609] GetProcessHeap () returned 0x6e0000 [0101.609] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x10) returned 0x6eab10 [0101.609] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x53f42c | out: phkResult=0x53f42c*=0x1f4) returned 0x0 [0101.610] RegQueryValueExW (in: hKey=0x1f4, lpValueName="Startup", lpReserved=0x0, lpType=0x53f428, lpData=0x6ff598, lpcbData=0x53f430*=0x1e2 | out: lpType=0x53f428*=0x2, lpData="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x53f430*=0x98) returned 0x0 [0101.610] RegCloseKey (hKey=0x1f4) returned 0x0 [0101.610] GetProcessHeap () returned 0x6e0000 [0101.610] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6eab10 | out: hHeap=0x6e0000) returned 1 [0101.610] GetProcessHeap () returned 0x6e0000 [0101.610] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x1e) returned 0x6e4428 [0101.610] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x53f42c | out: phkResult=0x53f42c*=0x1f4) returned 0x0 [0101.610] RegQueryValueExW (in: hKey=0x1f4, lpValueName="Common Startup", lpReserved=0x0, lpType=0x53f428, lpData=0x6ff630, lpcbData=0x53f430*=0x14a | out: lpType=0x53f428*=0x0, lpData=0x6ff630*=0x0, lpcbData=0x53f430*=0x14a) returned 0x2 [0101.610] RegCloseKey (hKey=0x1f4) returned 0x0 [0101.611] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x53f440 | out: phkResult=0x53f440*=0x1f4) returned 0x0 [0101.611] RegQueryValueExW (in: hKey=0x1f4, lpValueName="Common Startup", lpReserved=0x0, lpType=0x53f43c, lpData=0x6ff630, lpcbData=0x53f444*=0x14a | out: lpType=0x53f43c*=0x2, lpData="%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x53f444*=0x78) returned 0x0 [0101.611] RegCloseKey (hKey=0x1f4) returned 0x0 [0101.611] GetProcessHeap () returned 0x6e0000 [0101.611] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6e4428 | out: hHeap=0x6e0000) returned 1 [0101.611] GetProcessHeap () returned 0x6e0000 [0101.611] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6e49f0 | out: hHeap=0x6e0000) returned 1 [0101.611] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup;%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpDst=0x6ff3a8, nSize=0xf1 | out: lpDst="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup;C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned 0x8b [0101.611] GetProcessHeap () returned 0x6e0000 [0101.611] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6ff598 | out: hHeap=0x6e0000) returned 1 [0101.611] GetProcessHeap () returned 0x6e0000 [0101.611] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6ede80 | out: hHeap=0x6e0000) returned 1 [0101.611] GetProcessHeap () returned 0x6e0000 [0101.612] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x20a) returned 0x6ff598 [0101.612] GetProcessHeap () returned 0x6e0000 [0101.612] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x20a) returned 0x6ff7b0 [0101.612] GetProcessHeap () returned 0x6e0000 [0101.612] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x20a) returned 0x6ff9c8 [0101.612] GetProcessHeap () returned 0x6e0000 [0101.612] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x20a) returned 0x6ffbe0 [0101.612] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x6ff598, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\AntiRecuvaAndDB.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\antirecuvaanddb.exe")) returned 0x2b [0101.612] GetProcessHeap () returned 0x6e0000 [0101.612] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x20a) returned 0x6ffdf8 [0101.612] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x6ffdf8, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\AntiRecuvaAndDB.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\antirecuvaanddb.exe")) returned 0x2b [0101.612] GetProcessHeap () returned 0x6e0000 [0101.612] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6ffdf8 | out: hHeap=0x6e0000) returned 1 [0101.612] GetProcessHeap () returned 0x6e0000 [0101.612] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x20a) returned 0x6ffdf8 [0101.613] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x6ffdf8, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\AntiRecuvaAndDB.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\antirecuvaanddb.exe")) returned 0x2b [0101.613] GetProcessHeap () returned 0x6e0000 [0101.613] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6ffdf8 | out: hHeap=0x6e0000) returned 1 [0101.613] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\AntiRecuvaAndDB.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\antirecuvaanddb.exe"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\AntiRecuvaAndDB.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\antirecuvaanddb.exe"), bFailIfExists=0) returned 1 [0101.963] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x20106, phkResult=0x53f528 | out: phkResult=0x53f528*=0x1f4) returned 0x0 [0101.964] RegSetValueExW (hKey=0x1f4, lpValueName="AntiRecuvaAndDB", Reserved=0x0, dwType=0x1, lpData=0x6ff7b0, cbData=0x62) returned 0x5 [0101.964] RegCloseKey (hKey=0x1f4) returned 0x0 [0101.964] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x20106, phkResult=0x53f524 | out: phkResult=0x53f524*=0x1f4) returned 0x0 [0101.964] RegSetValueExW (in: hKey=0x1f4, lpValueName="AntiRecuvaAndDB", Reserved=0x0, dwType=0x1, lpData="C:\\Users\\FD1HVy\\AppData\\Local\\AntiRecuvaAndDB.exe", cbData=0x62 | out: lpData="C:\\Users\\FD1HVy\\AppData\\Local\\AntiRecuvaAndDB.exe") returned 0x0 [0102.021] RegCloseKey (hKey=0x1f4) returned 0x0 [0102.022] GetProcessHeap () returned 0x6e0000 [0102.022] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x118) returned 0x6ea780 [0102.022] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\AntiRecuvaAndDB.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\antirecuvaanddb.exe"), lpNewFileName="c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\AntiRecuvaAndDB.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\antirecuvaanddb.exe"), bFailIfExists=1) returned 1 [0102.440] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\AntiRecuvaAndDB.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\antirecuvaanddb.exe"), lpNewFileName="c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\AntiRecuvaAndDB.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\antirecuvaanddb.exe"), bFailIfExists=1) returned 0 [0102.444] GetProcessHeap () returned 0x6e0000 [0102.444] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6ea780 | out: hHeap=0x6e0000) returned 1 [0102.444] GetProcessHeap () returned 0x6e0000 [0102.444] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6ff598 | out: hHeap=0x6e0000) returned 1 [0102.445] GetProcessHeap () returned 0x6e0000 [0102.445] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6ff7b0 | out: hHeap=0x6e0000) returned 1 [0102.445] GetProcessHeap () returned 0x6e0000 [0102.445] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6ff9c8 | out: hHeap=0x6e0000) returned 1 [0102.445] GetProcessHeap () returned 0x6e0000 [0102.445] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6ffbe0 | out: hHeap=0x6e0000) returned 1 [0102.445] GetProcessHeap () returned 0x6e0000 [0102.445] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6e4030 | out: hHeap=0x6e0000) returned 1 [0102.445] GetProcessHeap () returned 0x6e0000 [0102.445] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6e3df0 | out: hHeap=0x6e0000) returned 1 [0102.445] GetProcessHeap () returned 0x6e0000 [0102.445] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6ff3a8 | out: hHeap=0x6e0000) returned 1 [0102.445] GetProcessHeap () returned 0x6e0000 [0102.445] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x20) returned 0x700f40 [0102.446] GetProcessHeap () returned 0x6e0000 [0102.446] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x1e) returned 0x700f68 [0102.446] GetProcessHeap () returned 0x6e0000 [0102.446] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x1e) returned 0x700e78 [0102.446] GetProcessHeap () returned 0x6e0000 [0102.446] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x90) returned 0x6e49f0 [0102.446] GetProcessHeap () returned 0x6e0000 [0102.446] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6e49f0 | out: hHeap=0x6e0000) returned 1 [0102.446] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x700f68, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0102.446] GetProcessHeap () returned 0x6e0000 [0102.446] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x700e78 | out: hHeap=0x6e0000) returned 1 [0102.446] GetProcessHeap () returned 0x6e0000 [0102.446] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x700f40 | out: hHeap=0x6e0000) returned 1 [0102.447] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x53f544, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x53f544*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0102.447] GetProcessHeap () returned 0x6e0000 [0102.447] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x700f68 | out: hHeap=0x6e0000) returned 1 [0102.447] GetProcessHeap () returned 0x6e0000 [0102.447] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x28) returned 0x6f0408 [0102.447] GetProcessHeap () returned 0x6e0000 [0102.447] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x10) returned 0x6e7b60 [0102.448] GetProcessHeap () returned 0x6e0000 [0102.448] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x50) returned 0x6e3df0 [0102.448] GetProcessHeap () returned 0x6e0000 [0102.448] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x4e) returned 0x6e4030 [0102.448] GetProcessHeap () returned 0x6e0000 [0102.448] RtlReAllocateHeap (Heap=0x6e0000, Flags=0x0, Ptr=0x6e4030, Size=0x9a) returned 0x6eade8 [0102.448] GetProcessHeap () returned 0x6e0000 [0102.448] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x10) returned 0x6e7bf0 [0102.448] GetProcessHeap () returned 0x6e0000 [0102.448] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x190) returned 0x6ea558 [0102.448] GetProcessHeap () returned 0x6e0000 [0102.448] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x250) returned 0x6ff3a8 [0102.448] GetProcessHeap () returned 0x6e0000 [0102.448] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x90) returned 0x6e49f0 [0102.448] GetProcessHeap () returned 0x6e0000 [0102.449] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x84) returned 0x6eb548 [0102.449] GetProcessHeap () returned 0x6e0000 [0102.449] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x84) returned 0x6eb660 [0102.449] GetProcessHeap () returned 0x6e0000 [0102.449] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x90) returned 0x6e8238 [0102.449] GetProcessHeap () returned 0x6e0000 [0102.507] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6e8238 | out: hHeap=0x6e0000) returned 1 [0102.507] ExpandEnvironmentStringsW (in: lpSrc="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys", lpDst=0x6eb548, nSize=0x42 | out: lpDst="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys") returned 0x42 [0102.508] GetProcessHeap () returned 0x6e0000 [0102.508] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6eb660 | out: hHeap=0x6e0000) returned 1 [0102.508] GetProcessHeap () returned 0x6e0000 [0102.508] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6e49f0 | out: hHeap=0x6e0000) returned 1 [0102.508] GetProcessHeap () returned 0x6e0000 [0102.508] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0xc0) returned 0x6eb660 [0102.508] GetProcessHeap () returned 0x6e0000 [0102.508] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0xb8) returned 0x6e8238 [0102.508] GetProcessHeap () returned 0x6e0000 [0102.508] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0xb8) returned 0x6ea430 [0102.508] GetProcessHeap () returned 0x6e0000 [0102.508] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x90) returned 0x6e49f0 [0102.508] GetProcessHeap () returned 0x6e0000 [0102.508] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6e49f0 | out: hHeap=0x6e0000) returned 1 [0102.508] ExpandEnvironmentStringsW (in: lpSrc="C:\\Windows;C:\\ProgramData\\microsoft\\windows\\caches;C:\\Users\\admin\\microsoft\\windows\\caches;", lpDst=0x6e8238, nSize=0x5c | out: lpDst="C:\\Windows;C:\\ProgramData\\microsoft\\windows\\caches;C:\\Users\\admin\\microsoft\\windows\\caches;") returned 0x5c [0102.509] GetProcessHeap () returned 0x6e0000 [0102.509] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6ea430 | out: hHeap=0x6e0000) returned 1 [0102.509] GetProcessHeap () returned 0x6e0000 [0102.509] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6eb660 | out: hHeap=0x6e0000) returned 1 [0102.509] GetProcessHeap () returned 0x6e0000 [0102.509] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x20a) returned 0x6ff600 [0102.509] GetProcessHeap () returned 0x6e0000 [0102.509] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x20a) returned 0x6ff818 [0102.509] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x6ff818, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\AntiRecuvaAndDB.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\antirecuvaanddb.exe")) returned 0x2b [0102.509] GetProcessHeap () returned 0x6e0000 [0102.509] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6ff818 | out: hHeap=0x6e0000) returned 1 [0102.509] GetProcessHeap () returned 0x6e0000 [0102.509] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x184) returned 0x6ff818 [0102.509] GetProcessHeap () returned 0x6e0000 [0102.509] RtlReAllocateHeap (Heap=0x6e0000, Flags=0x0, Ptr=0x6ff818, Size=0x3ce) returned 0x6ff818 [0102.510] GetProcessHeap () returned 0x6e0000 [0102.510] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x86) returned 0x6e49f0 [0102.510] GetProcessHeap () returned 0x6e0000 [0102.510] RtlReAllocateHeap (Heap=0x6e0000, Flags=0x0, Ptr=0x6e49f0, Size=0xae) returned 0x6eb660 [0102.510] GetProcessHeap () returned 0x6e0000 [0102.510] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0xba) returned 0x6ea430 [0102.510] GetProcessHeap () returned 0x6e0000 [0102.510] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6ff600 | out: hHeap=0x6e0000) returned 1 [0102.510] GetProcessHeap () returned 0x6e0000 [0102.510] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6ea558 | out: hHeap=0x6e0000) returned 1 [0102.510] GetProcessHeap () returned 0x6e0000 [0102.510] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6ff3a8 | out: hHeap=0x6e0000) returned 1 [0102.510] GetProcessHeap () returned 0x6e0000 [0102.510] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6eb548 | out: hHeap=0x6e0000) returned 1 [0102.510] GetProcessHeap () returned 0x6e0000 [0102.510] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6e8238 | out: hHeap=0x6e0000) returned 1 [0102.511] GetProcessHeap () returned 0x6e0000 [0102.511] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6e7b60 | out: hHeap=0x6e0000) returned 1 [0102.511] GetProcessHeap () returned 0x6e0000 [0102.511] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6e3df0 | out: hHeap=0x6e0000) returned 1 [0102.511] GetProcessHeap () returned 0x6e0000 [0102.511] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x20) returned 0x701058 [0102.511] GetProcessHeap () returned 0x6e0000 [0102.511] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x1e) returned 0x701080 [0102.511] GetProcessHeap () returned 0x6e0000 [0102.511] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x1e) returned 0x701148 [0102.511] GetProcessHeap () returned 0x6e0000 [0102.511] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x90) returned 0x6e49f0 [0102.511] GetProcessHeap () returned 0x6e0000 [0102.511] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6e49f0 | out: hHeap=0x6e0000) returned 1 [0102.512] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x701080, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0102.512] GetProcessHeap () returned 0x6e0000 [0102.513] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x701148 | out: hHeap=0x6e0000) returned 1 [0102.513] GetProcessHeap () returned 0x6e0000 [0102.513] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x701058 | out: hHeap=0x6e0000) returned 1 [0102.513] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x53f544, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x53f544*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0102.513] GetProcessHeap () returned 0x6e0000 [0102.513] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x701080 | out: hHeap=0x6e0000) returned 1 [0102.513] GetProcessHeap () returned 0x6e0000 [0102.513] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x28) returned 0x6f05b8 [0102.513] GetProcessHeap () returned 0x6e0000 [0102.514] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x10) returned 0x6e7c80 [0102.514] GetProcessHeap () returned 0x6e0000 [0102.514] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x50) returned 0x6e3df0 [0102.514] GetProcessHeap () returned 0x6e0000 [0102.514] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x4e) returned 0x6e4030 [0102.514] GetProcessHeap () returned 0x6e0000 [0102.514] RtlReAllocateHeap (Heap=0x6e0000, Flags=0x0, Ptr=0x6e4030, Size=0x9a) returned 0x6eb548 [0102.514] GetProcessHeap () returned 0x6e0000 [0102.514] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x10) returned 0x6e7c98 [0102.514] GetProcessHeap () returned 0x6e0000 [0102.514] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x190) returned 0x6ea558 [0102.514] GetProcessHeap () returned 0x6e0000 [0102.514] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x250) returned 0x6ff3a8 [0102.514] GetProcessHeap () returned 0x6e0000 [0102.514] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x90) returned 0x6e49f0 [0102.515] GetProcessHeap () returned 0x6e0000 [0102.515] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x84) returned 0x6e8238 [0102.515] GetProcessHeap () returned 0x6e0000 [0102.515] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x84) returned 0x6eb418 [0102.515] GetProcessHeap () returned 0x6e0000 [0102.515] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x90) returned 0x6ea2f8 [0102.515] GetProcessHeap () returned 0x6e0000 [0102.515] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6ea2f8 | out: hHeap=0x6e0000) returned 1 [0102.515] ExpandEnvironmentStringsW (in: lpSrc="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys", lpDst=0x6e8238, nSize=0x42 | out: lpDst="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys") returned 0x42 [0102.515] GetProcessHeap () returned 0x6e0000 [0102.515] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6eb418 | out: hHeap=0x6e0000) returned 1 [0102.515] GetProcessHeap () returned 0x6e0000 [0102.515] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6e49f0 | out: hHeap=0x6e0000) returned 1 [0102.515] GetProcessHeap () returned 0x6e0000 [0102.515] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0xc0) returned 0x6eb418 [0102.515] GetProcessHeap () returned 0x6e0000 [0102.516] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0xb8) returned 0x6ea2f8 [0102.516] GetProcessHeap () returned 0x6e0000 [0102.516] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0xb8) returned 0x6ea1b8 [0102.516] GetProcessHeap () returned 0x6e0000 [0102.516] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x90) returned 0x6e49f0 [0102.516] GetProcessHeap () returned 0x6e0000 [0102.516] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6e49f0 | out: hHeap=0x6e0000) returned 1 [0102.516] ExpandEnvironmentStringsW (in: lpSrc="C:\\Windows;C:\\ProgramData\\microsoft\\windows\\caches;C:\\Users\\admin\\microsoft\\windows\\caches;", lpDst=0x6ea2f8, nSize=0x5c | out: lpDst="C:\\Windows;C:\\ProgramData\\microsoft\\windows\\caches;C:\\Users\\admin\\microsoft\\windows\\caches;") returned 0x5c [0102.516] GetProcessHeap () returned 0x6e0000 [0102.516] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6ea1b8 | out: hHeap=0x6e0000) returned 1 [0102.516] GetProcessHeap () returned 0x6e0000 [0102.516] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6eb418 | out: hHeap=0x6e0000) returned 1 [0102.516] GetProcessHeap () returned 0x6e0000 [0102.516] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x20a) returned 0x6ff600 [0102.516] GetProcessHeap () returned 0x6e0000 [0102.517] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x20a) returned 0x6ffbf0 [0102.517] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x6ffbf0, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\AntiRecuvaAndDB.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\antirecuvaanddb.exe")) returned 0x2b [0102.517] GetProcessHeap () returned 0x6e0000 [0102.517] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6ffbf0 | out: hHeap=0x6e0000) returned 1 [0102.517] GetProcessHeap () returned 0x6e0000 [0102.517] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x184) returned 0x6ffbf0 [0102.517] GetProcessHeap () returned 0x6e0000 [0102.517] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x24e) returned 0x6ffd80 [0102.517] GetProcessHeap () returned 0x6e0000 [0102.517] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x86) returned 0x6e49f0 [0102.517] GetProcessHeap () returned 0x6e0000 [0102.517] RtlReAllocateHeap (Heap=0x6e0000, Flags=0x0, Ptr=0x6e49f0, Size=0xae) returned 0x6eb418 [0102.517] GetProcessHeap () returned 0x6e0000 [0102.517] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0xba) returned 0x6ea1b8 [0102.517] GetProcessHeap () returned 0x6e0000 [0102.517] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6ff600 | out: hHeap=0x6e0000) returned 1 [0102.518] GetProcessHeap () returned 0x6e0000 [0102.518] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6ea558 | out: hHeap=0x6e0000) returned 1 [0102.518] GetProcessHeap () returned 0x6e0000 [0102.518] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6ff3a8 | out: hHeap=0x6e0000) returned 1 [0102.518] GetProcessHeap () returned 0x6e0000 [0102.518] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6e8238 | out: hHeap=0x6e0000) returned 1 [0102.518] GetProcessHeap () returned 0x6e0000 [0102.518] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6ea2f8 | out: hHeap=0x6e0000) returned 1 [0102.518] GetProcessHeap () returned 0x6e0000 [0102.518] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6e7c80 | out: hHeap=0x6e0000) returned 1 [0102.518] GetProcessHeap () returned 0x6e0000 [0102.518] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6e3df0 | out: hHeap=0x6e0000) returned 1 [0102.518] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x912013, lpParameter=0x53f570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f4 [0102.520] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x911fab, lpParameter=0x53f580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f8 [0102.521] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x911e4e, lpParameter=0x53f58c, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21c [0102.523] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x911859, lpParameter=0x53f580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x220 [0102.524] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x91197c, lpParameter=0x53f580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x224 [0102.525] WaitForSingleObject (hHandle=0x220, dwMilliseconds=0xffffffff) returned 0x0 [0103.947] WaitForMultipleObjects (nCount=0x4, lpHandles=0x53f598*=0x1f4, bWaitAll=1, dwMilliseconds=0xffffffff) Thread: id = 5 os_tid = 0xdec Thread: id = 6 os_tid = 0x770 [0102.815] GetVersion () returned 0x23f00206 [0102.815] GetCurrentProcess () returned 0xffffffff [0102.815] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x21cfb20 | out: TokenHandle=0x21cfb20*=0x228) returned 1 [0102.816] GetTokenInformation (in: TokenHandle=0x228, TokenInformationClass=0x14, TokenInformation=0x21cfb18, TokenInformationLength=0x4, ReturnLength=0x21cfb1c | out: TokenInformation=0x21cfb18, ReturnLength=0x21cfb1c) returned 1 [0102.816] CloseHandle (hObject=0x228) returned 1 [0102.816] GetProcessHeap () returned 0x6e0000 [0102.816] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x20) returned 0x701120 [0102.816] GetProcessHeap () returned 0x6e0000 [0102.816] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x1e) returned 0x701198 [0102.816] GetProcessHeap () returned 0x6e0000 [0102.816] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x1e) returned 0x700ec8 [0102.817] GetProcessHeap () returned 0x6e0000 [0102.817] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x90) returned 0x6e49f0 [0102.817] GetProcessHeap () returned 0x6e0000 [0102.817] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6e49f0 | out: hHeap=0x6e0000) returned 1 [0102.817] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x701198, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0102.817] GetProcessHeap () returned 0x6e0000 [0102.817] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x700ec8 | out: hHeap=0x6e0000) returned 1 [0102.817] GetProcessHeap () returned 0x6e0000 [0102.817] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x701120 | out: hHeap=0x6e0000) returned 1 [0102.817] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x21cfaa8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x21cfaa8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0102.819] GetProcessHeap () returned 0x6e0000 [0102.819] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x701198 | out: hHeap=0x6e0000) returned 1 [0102.819] GetProcessHeap () returned 0x6e0000 [0102.819] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x40) returned 0x6edfa0 [0102.819] GetProcessHeap () returned 0x6e0000 [0102.819] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x3a) returned 0x6ede80 [0102.819] GetProcessHeap () returned 0x6e0000 [0102.819] RtlReAllocateHeap (Heap=0x6e0000, Flags=0x0, Ptr=0x6ede80, Size=0x72) returned 0x6fe4c8 [0102.819] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x228 [0102.819] WaitForSingleObject (hHandle=0x228, dwMilliseconds=0x0) returned 0x102 [0102.820] CloseHandle (hObject=0x228) returned 1 [0102.820] GetProcessHeap () returned 0x6e0000 [0102.820] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6edfa0 | out: hHeap=0x6e0000) returned 1 [0102.820] GetProcessHeap () returned 0x6e0000 [0102.820] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6fe4c8 | out: hHeap=0x6e0000) returned 1 [0102.820] Sleep (dwMilliseconds=0x3e8) [0104.053] GetProcessHeap () returned 0x6e0000 [0104.053] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x20) returned 0x701058 [0104.053] GetProcessHeap () returned 0x6e0000 [0104.053] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x1e) returned 0x700fb8 [0104.053] GetProcessHeap () returned 0x6e0000 [0104.053] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x1e) returned 0x700f40 [0104.053] GetProcessHeap () returned 0x6e0000 [0104.053] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x90) returned 0x716e98 [0104.053] GetProcessHeap () returned 0x6e0000 [0104.053] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x716e98 | out: hHeap=0x6e0000) returned 1 [0104.053] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x700fb8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0104.054] GetProcessHeap () returned 0x6e0000 [0104.054] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x700f40 | out: hHeap=0x6e0000) returned 1 [0104.054] GetProcessHeap () returned 0x6e0000 [0104.054] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x701058 | out: hHeap=0x6e0000) returned 1 [0104.054] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x21cfaa8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x21cfaa8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0104.055] GetProcessHeap () returned 0x6e0000 [0104.055] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x700fb8 | out: hHeap=0x6e0000) returned 1 [0104.055] GetProcessHeap () returned 0x6e0000 [0104.055] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x40) returned 0x6ee030 [0104.055] GetProcessHeap () returned 0x6e0000 [0104.055] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x3a) returned 0x6ee078 [0104.055] GetProcessHeap () returned 0x6e0000 [0104.055] RtlReAllocateHeap (Heap=0x6e0000, Flags=0x0, Ptr=0x6ee078, Size=0x72) returned 0x6fe6c8 [0104.055] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x248 [0104.055] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0x0) returned 0x102 [0104.055] CloseHandle (hObject=0x248) returned 1 [0104.055] GetProcessHeap () returned 0x6e0000 [0104.056] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6ee030 | out: hHeap=0x6e0000) returned 1 [0104.056] GetProcessHeap () returned 0x6e0000 [0104.056] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6fe6c8 | out: hHeap=0x6e0000) returned 1 [0104.056] Sleep (dwMilliseconds=0x3e8) [0105.189] GetProcessHeap () returned 0x6e0000 [0105.189] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x20) returned 0x701198 [0105.189] GetProcessHeap () returned 0x6e0000 [0105.189] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x1e) returned 0x700fb8 [0105.189] GetProcessHeap () returned 0x6e0000 [0105.189] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x1e) returned 0x700ef0 [0105.189] GetProcessHeap () returned 0x6e0000 [0105.189] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x90) returned 0x716a70 [0105.189] GetProcessHeap () returned 0x6e0000 [0105.189] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x716a70 | out: hHeap=0x6e0000) returned 1 [0105.189] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x700fb8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0105.190] GetProcessHeap () returned 0x6e0000 [0105.190] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x700ef0 | out: hHeap=0x6e0000) returned 1 [0105.190] GetProcessHeap () returned 0x6e0000 [0105.190] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x701198 | out: hHeap=0x6e0000) returned 1 [0105.190] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x21cfaa8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x21cfaa8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0105.191] GetProcessHeap () returned 0x6e0000 [0105.191] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x700fb8 | out: hHeap=0x6e0000) returned 1 [0105.191] GetProcessHeap () returned 0x6e0000 [0105.191] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x40) returned 0x6eda00 [0105.191] GetProcessHeap () returned 0x6e0000 [0105.191] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x3a) returned 0x6ee150 [0105.191] GetProcessHeap () returned 0x6e0000 [0105.191] RtlReAllocateHeap (Heap=0x6e0000, Flags=0x0, Ptr=0x6ee150, Size=0x72) returned 0x6fe948 [0105.191] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2d0 [0105.191] WaitForSingleObject (hHandle=0x2d0, dwMilliseconds=0x0) returned 0x102 [0105.192] CloseHandle (hObject=0x2d0) returned 1 [0105.192] GetProcessHeap () returned 0x6e0000 [0105.192] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6eda00 | out: hHeap=0x6e0000) returned 1 [0105.192] GetProcessHeap () returned 0x6e0000 [0105.192] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6fe948 | out: hHeap=0x6e0000) returned 1 [0105.192] Sleep (dwMilliseconds=0x3e8) [0106.390] GetProcessHeap () returned 0x6e0000 [0106.390] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x20) returned 0x700f68 [0106.390] GetProcessHeap () returned 0x6e0000 [0106.390] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x1e) returned 0x7011c0 [0106.390] GetProcessHeap () returned 0x6e0000 [0106.390] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x1e) returned 0x700fb8 [0106.390] GetProcessHeap () returned 0x6e0000 [0106.390] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x90) returned 0x7169d8 [0106.390] GetProcessHeap () returned 0x6e0000 [0106.391] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x7169d8 | out: hHeap=0x6e0000) returned 1 [0106.391] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x7011c0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0106.391] GetProcessHeap () returned 0x6e0000 [0106.391] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x700fb8 | out: hHeap=0x6e0000) returned 1 [0106.391] GetProcessHeap () returned 0x6e0000 [0106.391] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x700f68 | out: hHeap=0x6e0000) returned 1 [0106.391] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x21cfaa8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x21cfaa8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0106.393] GetProcessHeap () returned 0x6e0000 [0106.393] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x7011c0 | out: hHeap=0x6e0000) returned 1 [0106.393] GetProcessHeap () returned 0x6e0000 [0106.393] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x40) returned 0x6eda48 [0106.393] GetProcessHeap () returned 0x6e0000 [0106.393] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x3a) returned 0x6eda90 [0106.393] GetProcessHeap () returned 0x6e0000 [0106.393] RtlReAllocateHeap (Heap=0x6e0000, Flags=0x0, Ptr=0x6eda90, Size=0x72) returned 0x6fe948 [0106.394] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2dc [0106.395] WaitForSingleObject (hHandle=0x2dc, dwMilliseconds=0x0) returned 0x102 [0106.395] CloseHandle (hObject=0x2dc) returned 1 [0106.395] GetProcessHeap () returned 0x6e0000 [0106.395] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6eda48 | out: hHeap=0x6e0000) returned 1 [0106.395] GetProcessHeap () returned 0x6e0000 [0106.395] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6fe948 | out: hHeap=0x6e0000) returned 1 [0106.395] Sleep (dwMilliseconds=0x3e8) [0109.063] GetProcessHeap () returned 0x6e0000 [0109.063] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x20) returned 0x701030 [0109.063] GetProcessHeap () returned 0x6e0000 [0109.063] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x1e) returned 0x700f68 [0109.063] GetProcessHeap () returned 0x6e0000 [0109.063] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x1e) returned 0x700fb8 [0109.063] GetProcessHeap () returned 0x6e0000 [0109.063] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x90) returned 0x717190 [0109.063] GetProcessHeap () returned 0x6e0000 [0109.063] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x717190 | out: hHeap=0x6e0000) returned 1 [0109.063] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x700f68, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0109.063] GetProcessHeap () returned 0x6e0000 [0109.064] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x700fb8 | out: hHeap=0x6e0000) returned 1 [0109.064] GetProcessHeap () returned 0x6e0000 [0109.064] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x701030 | out: hHeap=0x6e0000) returned 1 [0109.064] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x21cfaa8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x21cfaa8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0109.064] GetProcessHeap () returned 0x6e0000 [0109.064] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x700f68 | out: hHeap=0x6e0000) returned 1 [0109.064] GetProcessHeap () returned 0x6e0000 [0109.065] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x40) returned 0x6eda48 [0109.065] GetProcessHeap () returned 0x6e0000 [0109.065] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x3a) returned 0x6eda90 [0109.065] GetProcessHeap () returned 0x6e0000 [0109.065] RtlReAllocateHeap (Heap=0x6e0000, Flags=0x0, Ptr=0x6eda90, Size=0x72) returned 0x6fefc8 [0109.065] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2dc [0109.065] WaitForSingleObject (hHandle=0x2dc, dwMilliseconds=0x0) returned 0x102 [0109.065] CloseHandle (hObject=0x2dc) returned 1 [0109.065] GetProcessHeap () returned 0x6e0000 [0109.065] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6eda48 | out: hHeap=0x6e0000) returned 1 [0109.065] GetProcessHeap () returned 0x6e0000 [0109.066] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6fefc8 | out: hHeap=0x6e0000) returned 1 [0109.066] Sleep (dwMilliseconds=0x3e8) [0111.121] GetProcessHeap () returned 0x6e0000 [0111.121] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x20) returned 0x7011c0 [0111.121] GetProcessHeap () returned 0x6e0000 [0111.121] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x1e) returned 0x700f68 [0111.121] GetProcessHeap () returned 0x6e0000 [0111.121] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x1e) returned 0x700fb8 [0111.121] GetProcessHeap () returned 0x6e0000 [0111.121] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x90) returned 0x717060 [0111.121] GetProcessHeap () returned 0x6e0000 [0111.121] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x717060 | out: hHeap=0x6e0000) returned 1 [0111.122] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x700f68, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0111.122] GetProcessHeap () returned 0x6e0000 [0111.122] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x700fb8 | out: hHeap=0x6e0000) returned 1 [0111.122] GetProcessHeap () returned 0x6e0000 [0111.122] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x7011c0 | out: hHeap=0x6e0000) returned 1 [0111.122] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x21cfaa8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x21cfaa8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0111.123] GetProcessHeap () returned 0x6e0000 [0111.123] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x700f68 | out: hHeap=0x6e0000) returned 1 [0111.123] GetProcessHeap () returned 0x6e0000 [0111.123] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x40) returned 0x6eda48 [0111.123] GetProcessHeap () returned 0x6e0000 [0111.123] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x3a) returned 0x6eda90 [0111.123] GetProcessHeap () returned 0x6e0000 [0111.123] RtlReAllocateHeap (Heap=0x6e0000, Flags=0x0, Ptr=0x6eda90, Size=0x72) returned 0x6ff1c8 [0111.123] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2dc [0111.124] WaitForSingleObject (hHandle=0x2dc, dwMilliseconds=0x0) returned 0x102 [0111.124] CloseHandle (hObject=0x2dc) returned 1 [0111.124] GetProcessHeap () returned 0x6e0000 [0111.124] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6eda48 | out: hHeap=0x6e0000) returned 1 [0111.124] GetProcessHeap () returned 0x6e0000 [0111.124] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6ff1c8 | out: hHeap=0x6e0000) returned 1 [0111.124] Sleep (dwMilliseconds=0x3e8) [0112.915] GetProcessHeap () returned 0x6e0000 [0112.915] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x20) returned 0x701030 [0112.915] GetProcessHeap () returned 0x6e0000 [0112.915] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x1e) returned 0x700f68 [0112.916] GetProcessHeap () returned 0x6e0000 [0112.916] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x1e) returned 0x700fb8 [0112.916] GetProcessHeap () returned 0x6e0000 [0112.916] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x90) returned 0x7176e8 [0112.916] GetProcessHeap () returned 0x6e0000 [0112.916] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x7176e8 | out: hHeap=0x6e0000) returned 1 [0112.916] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x700f68, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0112.917] GetProcessHeap () returned 0x6e0000 [0112.917] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x700fb8 | out: hHeap=0x6e0000) returned 1 [0112.917] GetProcessHeap () returned 0x6e0000 [0112.917] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x701030 | out: hHeap=0x6e0000) returned 1 [0112.918] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x21cfaa8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x21cfaa8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0112.918] GetProcessHeap () returned 0x6e0000 [0112.918] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x700f68 | out: hHeap=0x6e0000) returned 1 [0112.919] GetProcessHeap () returned 0x6e0000 [0112.919] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x40) returned 0x6eda48 [0112.919] GetProcessHeap () returned 0x6e0000 [0112.919] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x3a) returned 0x6eda90 [0112.919] GetProcessHeap () returned 0x6e0000 [0112.919] RtlReAllocateHeap (Heap=0x6e0000, Flags=0x0, Ptr=0x6eda90, Size=0x72) returned 0x6fe6c8 [0112.919] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2dc [0112.919] WaitForSingleObject (hHandle=0x2dc, dwMilliseconds=0x0) returned 0x102 [0112.919] CloseHandle (hObject=0x2dc) returned 1 [0112.920] GetProcessHeap () returned 0x6e0000 [0112.920] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6eda48 | out: hHeap=0x6e0000) returned 1 [0112.920] GetProcessHeap () returned 0x6e0000 [0112.920] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6fe6c8 | out: hHeap=0x6e0000) returned 1 [0112.920] Sleep (dwMilliseconds=0x3e8) [0114.793] GetProcessHeap () returned 0x6e0000 [0114.793] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x20) returned 0x7011c0 [0114.793] GetProcessHeap () returned 0x6e0000 [0114.793] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x1e) returned 0x700f68 [0114.793] GetProcessHeap () returned 0x6e0000 [0114.793] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x1e) returned 0x700fb8 [0114.793] GetProcessHeap () returned 0x6e0000 [0114.793] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x90) returned 0x716f30 [0114.793] GetProcessHeap () returned 0x6e0000 [0114.793] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x716f30 | out: hHeap=0x6e0000) returned 1 [0114.793] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x700f68, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0114.794] GetProcessHeap () returned 0x6e0000 [0114.794] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x700fb8 | out: hHeap=0x6e0000) returned 1 [0114.794] GetProcessHeap () returned 0x6e0000 [0114.794] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x7011c0 | out: hHeap=0x6e0000) returned 1 [0114.794] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x21cfaa8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x21cfaa8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0114.794] GetProcessHeap () returned 0x6e0000 [0114.794] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x700f68 | out: hHeap=0x6e0000) returned 1 [0114.794] GetProcessHeap () returned 0x6e0000 [0114.795] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x40) returned 0x6eda48 [0114.795] GetProcessHeap () returned 0x6e0000 [0114.795] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x3a) returned 0x6eda90 [0114.795] GetProcessHeap () returned 0x6e0000 [0114.795] RtlReAllocateHeap (Heap=0x6e0000, Flags=0x0, Ptr=0x6eda90, Size=0x72) returned 0x6fe8c8 [0114.795] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2dc [0114.795] WaitForSingleObject (hHandle=0x2dc, dwMilliseconds=0x0) returned 0x102 [0114.795] CloseHandle (hObject=0x2dc) returned 1 [0114.795] GetProcessHeap () returned 0x6e0000 [0114.795] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6eda48 | out: hHeap=0x6e0000) returned 1 [0114.795] GetProcessHeap () returned 0x6e0000 [0114.796] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6fe8c8 | out: hHeap=0x6e0000) returned 1 [0114.796] Sleep (dwMilliseconds=0x3e8) [0116.227] GetProcessHeap () returned 0x6e0000 [0116.227] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x20) returned 0x7011c0 [0116.227] GetProcessHeap () returned 0x6e0000 [0116.227] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x1e) returned 0x700fb8 [0116.227] GetProcessHeap () returned 0x6e0000 [0116.227] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x1e) returned 0x701030 [0116.227] GetProcessHeap () returned 0x6e0000 [0116.227] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x90) returned 0x717488 [0116.227] GetProcessHeap () returned 0x6e0000 [0116.227] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x717488 | out: hHeap=0x6e0000) returned 1 [0116.227] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x700fb8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0116.228] GetProcessHeap () returned 0x6e0000 [0116.228] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x701030 | out: hHeap=0x6e0000) returned 1 [0116.228] GetProcessHeap () returned 0x6e0000 [0116.228] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x7011c0 | out: hHeap=0x6e0000) returned 1 [0116.228] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x21cfaa8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x21cfaa8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0116.229] GetProcessHeap () returned 0x6e0000 [0116.229] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x700fb8 | out: hHeap=0x6e0000) returned 1 [0116.229] GetProcessHeap () returned 0x6e0000 [0116.229] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x40) returned 0x6eda48 [0116.229] GetProcessHeap () returned 0x6e0000 [0116.229] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x3a) returned 0x6eda90 [0116.229] GetProcessHeap () returned 0x6e0000 [0116.229] RtlReAllocateHeap (Heap=0x6e0000, Flags=0x0, Ptr=0x6eda90, Size=0x72) returned 0x6fea48 [0116.229] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2dc [0116.230] WaitForSingleObject (hHandle=0x2dc, dwMilliseconds=0x0) returned 0x102 [0116.230] CloseHandle (hObject=0x2dc) returned 1 [0116.230] GetProcessHeap () returned 0x6e0000 [0116.230] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6eda48 | out: hHeap=0x6e0000) returned 1 [0116.230] GetProcessHeap () returned 0x6e0000 [0116.230] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6fea48 | out: hHeap=0x6e0000) returned 1 [0116.230] Sleep (dwMilliseconds=0x3e8) [0118.052] GetProcessHeap () returned 0x6e0000 [0118.052] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x20) returned 0x7011c0 [0118.052] GetProcessHeap () returned 0x6e0000 [0118.052] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x1e) returned 0x700f68 [0118.052] GetProcessHeap () returned 0x6e0000 [0118.052] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x1e) returned 0x700fb8 [0118.052] GetProcessHeap () returned 0x6e0000 [0118.052] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x90) returned 0x7176e8 [0118.052] GetProcessHeap () returned 0x6e0000 [0118.052] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x7176e8 | out: hHeap=0x6e0000) returned 1 [0118.052] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x700f68, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0118.052] GetProcessHeap () returned 0x6e0000 [0118.052] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x700fb8 | out: hHeap=0x6e0000) returned 1 [0118.052] GetProcessHeap () returned 0x6e0000 [0118.052] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x7011c0 | out: hHeap=0x6e0000) returned 1 [0118.053] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x21cfaa8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x21cfaa8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0118.053] GetProcessHeap () returned 0x6e0000 [0118.053] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x700f68 | out: hHeap=0x6e0000) returned 1 [0118.053] GetProcessHeap () returned 0x6e0000 [0118.053] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x40) returned 0x6eda48 [0118.053] GetProcessHeap () returned 0x6e0000 [0118.053] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x3a) returned 0x6eda90 [0118.054] GetProcessHeap () returned 0x6e0000 [0118.054] RtlReAllocateHeap (Heap=0x6e0000, Flags=0x0, Ptr=0x6eda90, Size=0x72) returned 0x6ff248 [0118.054] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2dc [0118.054] WaitForSingleObject (hHandle=0x2dc, dwMilliseconds=0x0) returned 0x102 [0118.054] CloseHandle (hObject=0x2dc) returned 1 [0118.054] GetProcessHeap () returned 0x6e0000 [0118.054] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6eda48 | out: hHeap=0x6e0000) returned 1 [0118.054] GetProcessHeap () returned 0x6e0000 [0118.054] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6ff248 | out: hHeap=0x6e0000) returned 1 [0118.055] Sleep (dwMilliseconds=0x3e8) [0119.323] GetProcessHeap () returned 0x6e0000 [0119.323] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x20) returned 0x7011c0 [0119.323] GetProcessHeap () returned 0x6e0000 [0119.323] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x1e) returned 0x700f68 [0119.323] GetProcessHeap () returned 0x6e0000 [0119.323] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x1e) returned 0x700fb8 [0119.323] GetProcessHeap () returned 0x6e0000 [0119.323] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x90) returned 0x716ba0 [0119.324] GetProcessHeap () returned 0x6e0000 [0119.324] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x716ba0 | out: hHeap=0x6e0000) returned 1 [0119.324] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x700f68, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0119.324] GetProcessHeap () returned 0x6e0000 [0119.324] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x700fb8 | out: hHeap=0x6e0000) returned 1 [0119.324] GetProcessHeap () returned 0x6e0000 [0119.324] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x7011c0 | out: hHeap=0x6e0000) returned 1 [0119.324] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x21cfaa8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x21cfaa8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0119.325] GetProcessHeap () returned 0x6e0000 [0119.325] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x700f68 | out: hHeap=0x6e0000) returned 1 [0119.326] GetProcessHeap () returned 0x6e0000 [0119.326] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x40) returned 0x6eda48 [0119.326] GetProcessHeap () returned 0x6e0000 [0119.326] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x3a) returned 0x6eda90 [0119.326] GetProcessHeap () returned 0x6e0000 [0119.326] RtlReAllocateHeap (Heap=0x6e0000, Flags=0x0, Ptr=0x6eda90, Size=0x72) returned 0x6ff0c8 [0119.326] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2dc [0119.326] WaitForSingleObject (hHandle=0x2dc, dwMilliseconds=0x0) returned 0x102 [0119.327] CloseHandle (hObject=0x2dc) returned 1 [0119.327] GetProcessHeap () returned 0x6e0000 [0119.327] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6eda48 | out: hHeap=0x6e0000) returned 1 [0119.327] GetProcessHeap () returned 0x6e0000 [0119.327] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6ff0c8 | out: hHeap=0x6e0000) returned 1 [0119.327] Sleep (dwMilliseconds=0x3e8) [0120.779] GetProcessHeap () returned 0x6e0000 [0120.779] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x20) returned 0x700f68 [0120.780] GetProcessHeap () returned 0x6e0000 [0120.780] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x1e) returned 0x700fb8 [0120.780] GetProcessHeap () returned 0x6e0000 [0120.780] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x1e) returned 0x7011c0 [0120.780] GetProcessHeap () returned 0x6e0000 [0120.780] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x90) returned 0x716810 [0120.780] GetProcessHeap () returned 0x6e0000 [0120.780] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x716810 | out: hHeap=0x6e0000) returned 1 [0120.780] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x700fb8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0120.780] GetProcessHeap () returned 0x6e0000 [0120.780] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x7011c0 | out: hHeap=0x6e0000) returned 1 [0120.780] GetProcessHeap () returned 0x6e0000 [0120.781] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x700f68 | out: hHeap=0x6e0000) returned 1 [0120.781] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x21cfaa8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x21cfaa8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0120.782] GetProcessHeap () returned 0x6e0000 [0120.782] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x700fb8 | out: hHeap=0x6e0000) returned 1 [0120.782] GetProcessHeap () returned 0x6e0000 [0120.791] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x40) returned 0x6eda48 [0120.791] GetProcessHeap () returned 0x6e0000 [0120.791] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x3a) returned 0x6eda90 [0120.792] GetProcessHeap () returned 0x6e0000 [0120.792] RtlReAllocateHeap (Heap=0x6e0000, Flags=0x0, Ptr=0x6eda90, Size=0x72) returned 0x6ff148 [0120.792] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2dc [0120.792] WaitForSingleObject (hHandle=0x2dc, dwMilliseconds=0x0) returned 0x102 [0120.792] CloseHandle (hObject=0x2dc) returned 1 [0120.792] GetProcessHeap () returned 0x6e0000 [0120.793] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6eda48 | out: hHeap=0x6e0000) returned 1 [0120.793] GetProcessHeap () returned 0x6e0000 [0120.793] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6ff148 | out: hHeap=0x6e0000) returned 1 [0120.793] Sleep (dwMilliseconds=0x3e8) [0122.036] GetProcessHeap () returned 0x6e0000 [0122.036] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x20) returned 0x700f68 [0122.036] GetProcessHeap () returned 0x6e0000 [0122.036] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x1e) returned 0x7011c0 [0122.036] GetProcessHeap () returned 0x6e0000 [0122.036] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x1e) returned 0x700fb8 [0122.036] GetProcessHeap () returned 0x6e0000 [0122.036] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x90) returned 0x716d68 [0122.036] GetProcessHeap () returned 0x6e0000 [0122.036] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x716d68 | out: hHeap=0x6e0000) returned 1 [0122.036] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x7011c0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0122.037] GetProcessHeap () returned 0x6e0000 [0122.037] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x700fb8 | out: hHeap=0x6e0000) returned 1 [0122.037] GetProcessHeap () returned 0x6e0000 [0122.037] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x700f68 | out: hHeap=0x6e0000) returned 1 [0122.037] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x21cfaa8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x21cfaa8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0122.038] GetProcessHeap () returned 0x6e0000 [0122.038] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x7011c0 | out: hHeap=0x6e0000) returned 1 [0122.038] GetProcessHeap () returned 0x6e0000 [0122.038] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x40) returned 0x6eda48 [0122.038] GetProcessHeap () returned 0x6e0000 [0122.038] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x3a) returned 0x6eda90 [0122.038] GetProcessHeap () returned 0x6e0000 [0122.038] RtlReAllocateHeap (Heap=0x6e0000, Flags=0x0, Ptr=0x6eda90, Size=0x72) returned 0x6fe748 [0122.038] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2dc [0122.039] WaitForSingleObject (hHandle=0x2dc, dwMilliseconds=0x0) returned 0x102 [0122.039] CloseHandle (hObject=0x2dc) returned 1 [0122.039] GetProcessHeap () returned 0x6e0000 [0122.039] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6eda48 | out: hHeap=0x6e0000) returned 1 [0122.039] GetProcessHeap () returned 0x6e0000 [0122.039] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6fe748 | out: hHeap=0x6e0000) returned 1 [0122.039] Sleep (dwMilliseconds=0x3e8) [0123.442] GetProcessHeap () returned 0x6e0000 [0123.442] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x20) returned 0x700fb8 [0123.442] GetProcessHeap () returned 0x6e0000 [0123.442] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x1e) returned 0x701030 [0123.442] GetProcessHeap () returned 0x6e0000 [0123.442] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x1e) returned 0x700f68 [0123.442] GetProcessHeap () returned 0x6e0000 [0123.442] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x90) returned 0x716940 [0123.442] GetProcessHeap () returned 0x6e0000 [0123.552] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x716940 | out: hHeap=0x6e0000) returned 1 [0123.563] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x701030, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0123.564] GetProcessHeap () returned 0x6e0000 [0123.565] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x700f68 | out: hHeap=0x6e0000) returned 1 [0123.565] GetProcessHeap () returned 0x6e0000 [0123.565] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x700fb8 | out: hHeap=0x6e0000) returned 1 [0123.565] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x21cfaa8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x21cfaa8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0123.567] GetProcessHeap () returned 0x6e0000 [0123.567] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x701030 | out: hHeap=0x6e0000) returned 1 [0123.567] GetProcessHeap () returned 0x6e0000 [0123.567] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x40) returned 0x6eda48 [0123.567] GetProcessHeap () returned 0x6e0000 [0123.567] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x3a) returned 0x6eda90 [0123.567] GetProcessHeap () returned 0x6e0000 [0123.567] RtlReAllocateHeap (Heap=0x6e0000, Flags=0x0, Ptr=0x6eda90, Size=0x72) returned 0x6fe5c8 [0123.567] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2dc [0123.568] WaitForSingleObject (hHandle=0x2dc, dwMilliseconds=0x0) returned 0x102 [0123.568] CloseHandle (hObject=0x2dc) returned 1 [0123.568] GetProcessHeap () returned 0x6e0000 [0123.568] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6eda48 | out: hHeap=0x6e0000) returned 1 [0123.568] GetProcessHeap () returned 0x6e0000 [0123.568] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6fe5c8 | out: hHeap=0x6e0000) returned 1 [0123.569] Sleep (dwMilliseconds=0x3e8) [0124.938] GetProcessHeap () returned 0x6e0000 [0124.939] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x20) returned 0x7011c0 [0124.939] GetProcessHeap () returned 0x6e0000 [0124.939] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x1e) returned 0x700f68 [0124.939] GetProcessHeap () returned 0x6e0000 [0124.939] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x1e) returned 0x700fb8 [0124.939] GetProcessHeap () returned 0x6e0000 [0124.939] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x90) returned 0x716d68 [0124.939] GetProcessHeap () returned 0x6e0000 [0124.939] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x716d68 | out: hHeap=0x6e0000) returned 1 [0124.939] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x700f68, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0124.939] GetProcessHeap () returned 0x6e0000 [0124.939] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x700fb8 | out: hHeap=0x6e0000) returned 1 [0124.939] GetProcessHeap () returned 0x6e0000 [0124.939] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x7011c0 | out: hHeap=0x6e0000) returned 1 [0124.939] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x21cfaa8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x21cfaa8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0124.940] GetProcessHeap () returned 0x6e0000 [0124.940] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x700f68 | out: hHeap=0x6e0000) returned 1 [0124.940] GetProcessHeap () returned 0x6e0000 [0124.940] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x40) returned 0x6eda48 [0124.940] GetProcessHeap () returned 0x6e0000 [0124.941] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x3a) returned 0x6eda90 [0124.941] GetProcessHeap () returned 0x6e0000 [0124.941] RtlReAllocateHeap (Heap=0x6e0000, Flags=0x0, Ptr=0x6eda90, Size=0x72) returned 0x6fe7c8 [0124.941] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2e0 [0124.941] WaitForSingleObject (hHandle=0x2e0, dwMilliseconds=0x0) returned 0x102 [0124.941] CloseHandle (hObject=0x2e0) returned 1 [0124.941] GetProcessHeap () returned 0x6e0000 [0124.941] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6eda48 | out: hHeap=0x6e0000) returned 1 [0124.941] GetProcessHeap () returned 0x6e0000 [0124.941] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6fe7c8 | out: hHeap=0x6e0000) returned 1 [0124.942] Sleep (dwMilliseconds=0x3e8) [0126.203] GetProcessHeap () returned 0x6e0000 [0126.203] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x20) returned 0x700fb8 [0126.203] GetProcessHeap () returned 0x6e0000 [0126.203] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x1e) returned 0x700f68 [0126.203] GetProcessHeap () returned 0x6e0000 [0126.203] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x1e) returned 0x7011c0 [0126.203] GetProcessHeap () returned 0x6e0000 [0126.203] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x90) returned 0x716810 [0126.204] GetProcessHeap () returned 0x6e0000 [0126.204] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x716810 | out: hHeap=0x6e0000) returned 1 [0126.204] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x700f68, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0126.204] GetProcessHeap () returned 0x6e0000 [0126.204] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x7011c0 | out: hHeap=0x6e0000) returned 1 [0126.204] GetProcessHeap () returned 0x6e0000 [0126.204] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x700fb8 | out: hHeap=0x6e0000) returned 1 [0126.204] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x21cfaa8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x21cfaa8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0126.206] GetProcessHeap () returned 0x6e0000 [0126.206] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x700f68 | out: hHeap=0x6e0000) returned 1 [0126.206] GetProcessHeap () returned 0x6e0000 [0126.206] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x40) returned 0x6eda48 [0126.206] GetProcessHeap () returned 0x6e0000 [0126.206] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x3a) returned 0x6eda90 [0126.207] GetProcessHeap () returned 0x6e0000 [0126.207] RtlReAllocateHeap (Heap=0x6e0000, Flags=0x0, Ptr=0x6eda90, Size=0x72) returned 0x6ff048 [0126.207] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2e0 [0126.207] WaitForSingleObject (hHandle=0x2e0, dwMilliseconds=0x0) returned 0x102 [0126.207] CloseHandle (hObject=0x2e0) returned 1 [0126.207] GetProcessHeap () returned 0x6e0000 [0126.207] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6eda48 | out: hHeap=0x6e0000) returned 1 [0126.207] GetProcessHeap () returned 0x6e0000 [0126.208] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6ff048 | out: hHeap=0x6e0000) returned 1 [0126.208] Sleep (dwMilliseconds=0x3e8) [0130.149] GetProcessHeap () returned 0x6e0000 [0130.149] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x20) returned 0x7011c0 [0130.149] GetProcessHeap () returned 0x6e0000 [0130.149] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x1e) returned 0x700f68 [0130.149] GetProcessHeap () returned 0x6e0000 [0130.150] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x1e) returned 0x700fb8 [0130.150] GetProcessHeap () returned 0x6e0000 [0130.150] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x90) returned 0x716fc8 [0130.150] GetProcessHeap () returned 0x6e0000 [0130.150] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x716fc8 | out: hHeap=0x6e0000) returned 1 [0130.150] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x700f68, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0130.150] GetProcessHeap () returned 0x6e0000 [0130.150] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x700fb8 | out: hHeap=0x6e0000) returned 1 [0130.150] GetProcessHeap () returned 0x6e0000 [0130.150] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x7011c0 | out: hHeap=0x6e0000) returned 1 [0130.151] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x21cfaa8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x21cfaa8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0130.160] GetProcessHeap () returned 0x6e0000 [0130.160] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x700f68 | out: hHeap=0x6e0000) returned 1 [0130.160] GetProcessHeap () returned 0x6e0000 [0130.160] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x40) returned 0x6eda48 [0130.160] GetProcessHeap () returned 0x6e0000 [0130.160] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x3a) returned 0x6eda90 [0130.160] GetProcessHeap () returned 0x6e0000 [0130.161] RtlReAllocateHeap (Heap=0x6e0000, Flags=0x0, Ptr=0x6eda90, Size=0x72) returned 0x6febc8 [0130.161] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2e0 [0130.161] WaitForSingleObject (hHandle=0x2e0, dwMilliseconds=0x0) returned 0x102 [0130.162] CloseHandle (hObject=0x2e0) returned 1 [0130.162] GetProcessHeap () returned 0x6e0000 [0130.162] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6eda48 | out: hHeap=0x6e0000) returned 1 [0130.164] GetProcessHeap () returned 0x6e0000 [0130.164] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6febc8 | out: hHeap=0x6e0000) returned 1 [0130.164] Sleep (dwMilliseconds=0x3e8) [0131.954] GetProcessHeap () returned 0x6e0000 [0131.954] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x20) returned 0x700f68 [0131.954] GetProcessHeap () returned 0x6e0000 [0131.954] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x1e) returned 0x7011c0 [0131.954] GetProcessHeap () returned 0x6e0000 [0131.955] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x1e) returned 0x700fb8 [0131.955] GetProcessHeap () returned 0x6e0000 [0131.955] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x90) returned 0x716fc8 [0131.955] GetProcessHeap () returned 0x6e0000 [0131.955] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x716fc8 | out: hHeap=0x6e0000) returned 1 [0131.955] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x7011c0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0131.955] GetProcessHeap () returned 0x6e0000 [0131.955] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x700fb8 | out: hHeap=0x6e0000) returned 1 [0131.955] GetProcessHeap () returned 0x6e0000 [0131.955] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x700f68 | out: hHeap=0x6e0000) returned 1 [0131.955] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x21cfaa8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x21cfaa8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0131.956] GetProcessHeap () returned 0x6e0000 [0131.956] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x7011c0 | out: hHeap=0x6e0000) returned 1 [0131.956] GetProcessHeap () returned 0x6e0000 [0131.956] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x40) returned 0x6eda48 [0131.956] GetProcessHeap () returned 0x6e0000 [0131.956] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x3a) returned 0x6eda90 [0131.956] GetProcessHeap () returned 0x6e0000 [0131.956] RtlReAllocateHeap (Heap=0x6e0000, Flags=0x0, Ptr=0x6eda90, Size=0x72) returned 0x6fe5c8 [0131.956] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2e0 [0131.956] WaitForSingleObject (hHandle=0x2e0, dwMilliseconds=0x0) returned 0x102 [0131.957] CloseHandle (hObject=0x2e0) returned 1 [0131.957] GetProcessHeap () returned 0x6e0000 [0131.957] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6eda48 | out: hHeap=0x6e0000) returned 1 [0131.957] GetProcessHeap () returned 0x6e0000 [0131.957] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6fe5c8 | out: hHeap=0x6e0000) returned 1 [0131.957] Sleep (dwMilliseconds=0x3e8) [0133.422] GetProcessHeap () returned 0x6e0000 [0133.422] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x20) returned 0x701030 [0133.422] GetProcessHeap () returned 0x6e0000 [0133.422] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x1e) returned 0x700f68 [0133.422] GetProcessHeap () returned 0x6e0000 [0133.423] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x1e) returned 0x7011c0 [0133.423] GetProcessHeap () returned 0x6e0000 [0133.423] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x90) returned 0x716fc8 [0133.423] GetProcessHeap () returned 0x6e0000 [0133.423] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x716fc8 | out: hHeap=0x6e0000) returned 1 [0133.423] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x700f68, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0133.423] GetProcessHeap () returned 0x6e0000 [0133.423] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x7011c0 | out: hHeap=0x6e0000) returned 1 [0133.423] GetProcessHeap () returned 0x6e0000 [0133.423] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x701030 | out: hHeap=0x6e0000) returned 1 [0133.423] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x21cfaa8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x21cfaa8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0133.424] GetProcessHeap () returned 0x6e0000 [0133.424] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x700f68 | out: hHeap=0x6e0000) returned 1 [0133.424] GetProcessHeap () returned 0x6e0000 [0133.424] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x40) returned 0x6eda48 [0133.424] GetProcessHeap () returned 0x6e0000 [0133.424] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x3a) returned 0x6eda90 [0133.424] GetProcessHeap () returned 0x6e0000 [0133.424] RtlReAllocateHeap (Heap=0x6e0000, Flags=0x0, Ptr=0x6eda90, Size=0x72) returned 0x6fe948 [0133.425] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2e0 [0133.425] WaitForSingleObject (hHandle=0x2e0, dwMilliseconds=0x0) returned 0x102 [0133.425] CloseHandle (hObject=0x2e0) returned 1 [0133.425] GetProcessHeap () returned 0x6e0000 [0133.425] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6eda48 | out: hHeap=0x6e0000) returned 1 [0133.425] GetProcessHeap () returned 0x6e0000 [0133.425] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6fe948 | out: hHeap=0x6e0000) returned 1 [0133.425] Sleep (dwMilliseconds=0x3e8) [0134.890] GetProcessHeap () returned 0x6e0000 [0134.890] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x20) returned 0x701030 [0134.890] GetProcessHeap () returned 0x6e0000 [0134.890] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x1e) returned 0x700f68 [0134.890] GetProcessHeap () returned 0x6e0000 [0134.891] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x1e) returned 0x7011c0 [0134.891] GetProcessHeap () returned 0x6e0000 [0134.891] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x90) returned 0x716e00 [0134.891] GetProcessHeap () returned 0x6e0000 [0134.891] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x716e00 | out: hHeap=0x6e0000) returned 1 [0134.891] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x700f68, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0134.891] GetProcessHeap () returned 0x6e0000 [0134.891] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x7011c0 | out: hHeap=0x6e0000) returned 1 [0134.891] GetProcessHeap () returned 0x6e0000 [0134.891] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x701030 | out: hHeap=0x6e0000) returned 1 [0134.891] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x21cfaa8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x21cfaa8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0134.892] GetProcessHeap () returned 0x6e0000 [0134.892] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x700f68 | out: hHeap=0x6e0000) returned 1 [0134.892] GetProcessHeap () returned 0x6e0000 [0134.892] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x40) returned 0x6eda48 [0134.892] GetProcessHeap () returned 0x6e0000 [0134.892] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x3a) returned 0x6eda90 [0134.892] GetProcessHeap () returned 0x6e0000 [0134.893] RtlReAllocateHeap (Heap=0x6e0000, Flags=0x0, Ptr=0x6eda90, Size=0x72) returned 0x6fe8c8 [0134.893] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2e0 [0134.893] WaitForSingleObject (hHandle=0x2e0, dwMilliseconds=0x0) returned 0x102 [0134.893] CloseHandle (hObject=0x2e0) returned 1 [0134.893] GetProcessHeap () returned 0x6e0000 [0134.893] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6eda48 | out: hHeap=0x6e0000) returned 1 [0134.893] GetProcessHeap () returned 0x6e0000 [0134.893] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6fe8c8 | out: hHeap=0x6e0000) returned 1 [0134.893] Sleep (dwMilliseconds=0x3e8) [0136.327] GetProcessHeap () returned 0x6e0000 [0136.327] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x20) returned 0x7011c0 [0136.327] GetProcessHeap () returned 0x6e0000 [0136.327] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x1e) returned 0x700f68 [0136.327] GetProcessHeap () returned 0x6e0000 [0136.327] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x1e) returned 0x700fb8 [0136.327] GetProcessHeap () returned 0x6e0000 [0136.327] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x90) returned 0x716f30 [0136.327] GetProcessHeap () returned 0x6e0000 [0136.327] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x716f30 | out: hHeap=0x6e0000) returned 1 [0136.327] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x700f68, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0136.327] GetProcessHeap () returned 0x6e0000 [0136.328] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x700fb8 | out: hHeap=0x6e0000) returned 1 [0136.328] GetProcessHeap () returned 0x6e0000 [0136.328] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x7011c0 | out: hHeap=0x6e0000) returned 1 [0136.328] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x21cfaa8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x21cfaa8*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0136.328] GetProcessHeap () returned 0x6e0000 [0136.328] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x700f68 | out: hHeap=0x6e0000) returned 1 [0136.328] GetProcessHeap () returned 0x6e0000 [0136.328] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x40) returned 0x6ee078 [0136.329] GetProcessHeap () returned 0x6e0000 [0136.329] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x3a) returned 0x6eda48 [0136.329] GetProcessHeap () returned 0x6e0000 [0136.329] RtlReAllocateHeap (Heap=0x6e0000, Flags=0x0, Ptr=0x6eda48, Size=0x72) returned 0x6fe6c8 [0136.329] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x268 [0136.329] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0x0) returned 0x102 [0136.329] CloseHandle (hObject=0x268) returned 1 [0136.329] GetProcessHeap () returned 0x6e0000 [0136.329] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6ee078 | out: hHeap=0x6e0000) returned 1 [0136.329] GetProcessHeap () returned 0x6e0000 [0136.329] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6fe6c8 | out: hHeap=0x6e0000) returned 1 [0136.330] Sleep (dwMilliseconds=0x3e8) Thread: id = 7 os_tid = 0x9d8 [0102.821] GetProcessHeap () returned 0x6e0000 [0102.821] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x440) returned 0x7018d8 [0102.821] GetProcessHeap () returned 0x6e0000 [0102.821] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x434) returned 0x701d20 [0102.822] GetProcessHeap () returned 0x6e0000 [0102.822] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x701d20 | out: hHeap=0x6e0000) returned 1 [0102.822] GetProcessHeap () returned 0x6e0000 [0102.822] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x7018d8 | out: hHeap=0x6e0000) returned 1 Thread: id = 8 os_tid = 0xcfc [0102.825] GetProcessHeap () returned 0x6e0000 [0102.825] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x21a) returned 0x700ab0 [0102.825] GetProcessHeap () returned 0x6e0000 [0102.825] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x28) returned 0x6f0438 [0102.826] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x228 [0102.826] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x22c [0102.826] GetComputerNameW (in: lpBuffer=0x700ac0, nSize=0x245fb00 | out: lpBuffer="NQDPDE", nSize=0x245fb00) returned 1 [0102.834] GetProcessHeap () returned 0x6e0000 [0102.834] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x20) returned 0x7010f8 [0102.834] GetProcessHeap () returned 0x6e0000 [0102.834] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x4000) returned 0x7018d8 [0102.834] GetProcessHeap () returned 0x6e0000 [0102.834] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x10000) returned 0x7058e0 [0102.835] WNetOpenEnumW (in: dwScope=0x1, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x245fab4 | out: lphEnum=0x245fab4*=0x6e3970) returned 0x0 [0105.278] WNetEnumResourceW (in: hEnum=0x6e3970, lpcCount=0x245faa8, lpBuffer=0x7018d8, lpBufferSize=0x245fabc | out: lpcCount=0x245faa8, lpBuffer=0x7018d8, lpBufferSize=0x245fabc) returned 0x103 [0105.278] WNetCloseEnum (hEnum=0x6e3970) returned 0x0 [0105.278] GetProcessHeap () returned 0x6e0000 [0105.279] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x7018d8 | out: hHeap=0x6e0000) returned 1 [0105.279] GetProcessHeap () returned 0x6e0000 [0105.279] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x7058e0 | out: hHeap=0x6e0000) returned 1 [0105.279] GetProcessHeap () returned 0x6e0000 [0105.279] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x4000) returned 0x71b778 [0105.279] GetProcessHeap () returned 0x6e0000 [0105.279] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x10000) returned 0x7018d8 [0105.279] WNetOpenEnumW (in: dwScope=0x4, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x245fa9c | out: lphEnum=0x245fa9c*=0x6f9b40) returned 0x0 [0105.280] WNetEnumResourceW (in: hEnum=0x6f9b40, lpcCount=0x245fa90, lpBuffer=0x71b778, lpBufferSize=0x245faa4 | out: lpcCount=0x245fa90, lpBuffer=0x71b778, lpBufferSize=0x245faa4) returned 0x103 [0105.280] WNetCloseEnum (hEnum=0x6f9b40) returned 0x0 [0105.280] GetProcessHeap () returned 0x6e0000 [0105.280] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x71b778 | out: hHeap=0x6e0000) returned 1 [0105.281] GetProcessHeap () returned 0x6e0000 [0105.281] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x7018d8 | out: hHeap=0x6e0000) returned 1 [0105.281] GetProcessHeap () returned 0x6e0000 [0105.281] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x4000) returned 0x71b778 [0105.281] GetProcessHeap () returned 0x6e0000 [0105.281] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x10000) returned 0x7018d8 [0105.281] WNetOpenEnumW (in: dwScope=0x5, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x245fa84 | out: lphEnum=0x245fa84*=0x6ea838) returned 0x0 [0123.599] WNetEnumResourceW (in: hEnum=0x6ea838, lpcCount=0x245fa78, lpBuffer=0x71b778, lpBufferSize=0x245fa8c | out: lpcCount=0x245fa78, lpBuffer=0x71b778, lpBufferSize=0x245fa8c) returned 0x0 [0123.599] GetProcessHeap () returned 0x6e0000 [0123.599] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x4000) returned 0x7118e0 [0123.599] GetProcessHeap () returned 0x6e0000 [0123.599] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x10000) returned 0x71fb08 [0123.601] WNetOpenEnumW (dwScope=0x5, dwType=0x0, dwUsage=0x0, lpNetResource=0x71b778, lphEnum=0x245fa3c) Thread: id = 9 os_tid = 0xd0c [0103.541] GetLogicalDrives () returned 0x4 [0103.541] GetProcessHeap () returned 0x6e0000 [0103.541] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x40) returned 0x6edfe8 [0103.541] GetProcessHeap () returned 0x6e0000 [0103.541] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x28) returned 0x6f04c8 [0103.541] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x240 [0103.541] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x244 [0103.541] GetProcessHeap () returned 0x6e0000 [0103.541] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x20) returned 0x701030 [0103.541] GetProcessHeap () returned 0x6e0000 [0103.542] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x1e) returned 0x700fe0 [0103.542] GetProcessHeap () returned 0x6e0000 [0103.542] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x1e) returned 0x700e50 [0103.542] GetProcessHeap () returned 0x6e0000 [0103.542] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x90) returned 0x716ba0 [0103.542] GetProcessHeap () returned 0x6e0000 [0103.542] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x716ba0 | out: hHeap=0x6e0000) returned 1 [0103.542] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x700fe0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0103.542] GetProcessHeap () returned 0x6e0000 [0103.542] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x700e50 | out: hHeap=0x6e0000) returned 1 [0103.542] GetProcessHeap () returned 0x6e0000 [0103.542] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x701030 | out: hHeap=0x6e0000) returned 1 [0103.542] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x259fb7c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x259fb7c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0103.544] GetProcessHeap () returned 0x6e0000 [0103.544] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x700fe0 | out: hHeap=0x6e0000) returned 1 [0103.544] WaitForSingleObject (hHandle=0x244, dwMilliseconds=0xffffffff) returned 0x0 [0103.544] CloseHandle (hObject=0x244) returned 1 [0103.544] CloseHandle (hObject=0x240) returned 1 [0103.545] GetProcessHeap () returned 0x6e0000 [0103.545] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6f04c8 | out: hHeap=0x6e0000) returned 1 [0103.545] GetProcessHeap () returned 0x6e0000 [0103.545] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6edfe8 | out: hHeap=0x6e0000) returned 1 Thread: id = 10 os_tid = 0x9b0 [0103.536] GetLogicalDrives () returned 0x4 [0103.536] GetProcessHeap () returned 0x6e0000 [0103.536] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x20) returned 0x701148 [0103.536] GetProcessHeap () returned 0x6e0000 [0103.536] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x1e) returned 0x701080 [0103.536] GetProcessHeap () returned 0x6e0000 [0103.536] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x1e) returned 0x701030 [0103.536] GetProcessHeap () returned 0x6e0000 [0103.536] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x90) returned 0x716ba0 [0103.537] GetProcessHeap () returned 0x6e0000 [0103.537] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x716ba0 | out: hHeap=0x6e0000) returned 1 [0103.537] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x701080, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0103.537] GetProcessHeap () returned 0x6e0000 [0103.537] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x701030 | out: hHeap=0x6e0000) returned 1 [0103.537] GetProcessHeap () returned 0x6e0000 [0103.537] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x701148 | out: hHeap=0x6e0000) returned 1 [0103.537] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x26dfe5c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x26dfe5c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0103.538] GetProcessHeap () returned 0x6e0000 [0103.538] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x701080 | out: hHeap=0x6e0000) returned 1 [0103.538] GetProcessHeap () returned 0x6e0000 [0103.538] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x40) returned 0x6edfe8 [0103.538] GetProcessHeap () returned 0x6e0000 [0103.538] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x28) returned 0x6f0558 [0103.538] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x240 [0103.538] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x244 [0103.538] CloseHandle (hObject=0x244) returned 1 [0103.539] CloseHandle (hObject=0x240) returned 1 [0103.539] GetProcessHeap () returned 0x6e0000 [0103.539] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6f0558 | out: hHeap=0x6e0000) returned 1 [0103.539] GetProcessHeap () returned 0x6e0000 [0103.539] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6edfe8 | out: hHeap=0x6e0000) returned 1 Thread: id = 33 os_tid = 0x744 Thread: id = 34 os_tid = 0x6cc Process: id = "3" image_name = "cmd.exe" filename = "c:\\windows\\system32\\cmd.exe" page_root = "0x78a0000" os_pid = "0xdc4" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0xf9c" cmd_line = "\"C:\\WINDOWS\\system32\\cmd.exe\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "64" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103c1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 12 os_tid = 0x540 [0120.526] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff7ca630000 [0120.526] __set_app_type (_Type=0x1) [0120.526] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x7ff7ca646d00) returned 0x0 [0120.527] __getmainargs (in: _Argc=0x7ff7ca669200, _Argv=0x7ff7ca669208, _Env=0x7ff7ca669210, _DoWildCard=0, _StartInfo=0x7ff7ca66921c | out: _Argc=0x7ff7ca669200, _Argv=0x7ff7ca669208, _Env=0x7ff7ca669210) returned 0 [0120.528] _onexit (_Func=0x7ff7ca647fd0) returned 0x7ff7ca647fd0 [0120.528] _onexit (_Func=0x7ff7ca647fe0) returned 0x7ff7ca647fe0 [0120.528] _onexit (_Func=0x7ff7ca647ff0) returned 0x7ff7ca647ff0 [0120.529] _onexit (_Func=0x7ff7ca648000) returned 0x7ff7ca648000 [0120.530] _onexit (_Func=0x7ff7ca648010) returned 0x7ff7ca648010 [0120.531] _onexit (_Func=0x7ff7ca648020) returned 0x7ff7ca648020 [0120.531] GetCurrentThreadId () returned 0x540 [0120.531] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x540) returned 0x70 [0120.532] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x7ff92fdd0000 [0120.533] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="SetThreadUILanguage") returned 0x7ff92fdea990 [0120.533] SetThreadUILanguage (LangId=0x0) returned 0x409 [0121.178] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0121.178] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x7f8a4ff728 | out: phkResult=0x7f8a4ff728*=0x0) returned 0x2 [0121.179] VirtualQuery (in: lpAddress=0x7f8a4ff714, lpBuffer=0x7f8a4ff690, dwLength=0x30 | out: lpBuffer=0x7f8a4ff690*(BaseAddress=0x7f8a4ff000, AllocationBase=0x7f8a400000, AllocationProtect=0x4, __alignment1=0xffffb78a, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0121.179] VirtualQuery (in: lpAddress=0x7f8a400000, lpBuffer=0x7f8a4ff690, dwLength=0x30 | out: lpBuffer=0x7f8a4ff690*(BaseAddress=0x7f8a400000, AllocationBase=0x7f8a400000, AllocationProtect=0x4, __alignment1=0xffffb78a, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0121.179] VirtualQuery (in: lpAddress=0x7f8a401000, lpBuffer=0x7f8a4ff690, dwLength=0x30 | out: lpBuffer=0x7f8a4ff690*(BaseAddress=0x7f8a401000, AllocationBase=0x7f8a400000, AllocationProtect=0x4, __alignment1=0xffffb78a, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30 [0121.179] VirtualQuery (in: lpAddress=0x7f8a404000, lpBuffer=0x7f8a4ff690, dwLength=0x30 | out: lpBuffer=0x7f8a4ff690*(BaseAddress=0x7f8a404000, AllocationBase=0x7f8a400000, AllocationProtect=0x4, __alignment1=0xffffb78a, RegionSize=0xfc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0121.179] VirtualQuery (in: lpAddress=0x7f8a500000, lpBuffer=0x7f8a4ff690, dwLength=0x30 | out: lpBuffer=0x7f8a4ff690*(BaseAddress=0x7f8a500000, AllocationBase=0x7f8a500000, AllocationProtect=0x4, __alignment1=0xffffb78a, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0121.179] GetConsoleOutputCP () returned 0x1b5 [0121.862] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff7ca66fbb0 | out: lpCPInfo=0x7ff7ca66fbb0) returned 1 [0121.863] SetConsoleCtrlHandler (HandlerRoutine=0x7ff7ca658150, Add=1) returned 1 [0121.863] _get_osfhandle (_FileHandle=1) returned 0x25c [0121.863] GetConsoleMode (in: hConsoleHandle=0x25c, lpMode=0x7ff7ca66fc04 | out: lpMode=0x7ff7ca66fc04) returned 0 [0121.863] _get_osfhandle (_FileHandle=0) returned 0x258 [0121.863] GetConsoleMode (in: hConsoleHandle=0x258, lpMode=0x7ff7ca66fc00 | out: lpMode=0x7ff7ca66fc00) returned 0 [0121.863] _get_osfhandle (_FileHandle=1) returned 0x25c [0121.864] SetConsoleMode (hConsoleHandle=0x25c, dwMode=0x0) returned 0 [0121.864] _get_osfhandle (_FileHandle=1) returned 0x25c [0121.864] GetConsoleMode (in: hConsoleHandle=0x25c, lpMode=0x7ff7ca66fc08 | out: lpMode=0x7ff7ca66fc08) returned 0 [0121.864] _get_osfhandle (_FileHandle=0) returned 0x258 [0121.864] GetConsoleMode (in: hConsoleHandle=0x258, lpMode=0x7ff7ca66fc0c | out: lpMode=0x7ff7ca66fc0c) returned 0 [0121.864] GetEnvironmentStringsW () returned 0x18484285aa0* [0121.865] GetProcessHeap () returned 0x18484280000 [0121.865] RtlAllocateHeap (HeapHandle=0x18484280000, Flags=0x8, Size=0xa7c) returned 0x18484286530 [0121.865] FreeEnvironmentStringsA (penv="A") returned 1 [0121.865] GetProcessHeap () returned 0x18484280000 [0121.865] RtlAllocateHeap (HeapHandle=0x18484280000, Flags=0x8, Size=0x8) returned 0x18484283ce0 [0121.865] GetEnvironmentStringsW () returned 0x18484285aa0* [0121.865] GetProcessHeap () returned 0x18484280000 [0121.865] RtlAllocateHeap (HeapHandle=0x18484280000, Flags=0x8, Size=0xa7c) returned 0x18484286fd0 [0121.866] FreeEnvironmentStringsA (penv="A") returned 1 [0121.866] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x7f8a4fe5d8 | out: phkResult=0x7f8a4fe5d8*=0x7c) returned 0x0 [0121.867] RegQueryValueExW (in: hKey=0x7c, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x7f8a4fe5d0, lpData=0x7f8a4fe5f0, lpcbData=0x7f8a4fe5d4*=0x1000 | out: lpType=0x7f8a4fe5d0*=0x0, lpData=0x7f8a4fe5f0*=0x4, lpcbData=0x7f8a4fe5d4*=0x1000) returned 0x2 [0121.867] RegQueryValueExW (in: hKey=0x7c, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x7f8a4fe5d0, lpData=0x7f8a4fe5f0, lpcbData=0x7f8a4fe5d4*=0x1000 | out: lpType=0x7f8a4fe5d0*=0x4, lpData=0x7f8a4fe5f0*=0x1, lpcbData=0x7f8a4fe5d4*=0x4) returned 0x0 [0121.867] RegQueryValueExW (in: hKey=0x7c, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x7f8a4fe5d0, lpData=0x7f8a4fe5f0, lpcbData=0x7f8a4fe5d4*=0x1000 | out: lpType=0x7f8a4fe5d0*=0x0, lpData=0x7f8a4fe5f0*=0x1, lpcbData=0x7f8a4fe5d4*=0x1000) returned 0x2 [0121.867] RegQueryValueExW (in: hKey=0x7c, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x7f8a4fe5d0, lpData=0x7f8a4fe5f0, lpcbData=0x7f8a4fe5d4*=0x1000 | out: lpType=0x7f8a4fe5d0*=0x4, lpData=0x7f8a4fe5f0*=0x0, lpcbData=0x7f8a4fe5d4*=0x4) returned 0x0 [0121.867] RegQueryValueExW (in: hKey=0x7c, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x7f8a4fe5d0, lpData=0x7f8a4fe5f0, lpcbData=0x7f8a4fe5d4*=0x1000 | out: lpType=0x7f8a4fe5d0*=0x4, lpData=0x7f8a4fe5f0*=0x40, lpcbData=0x7f8a4fe5d4*=0x4) returned 0x0 [0121.867] RegQueryValueExW (in: hKey=0x7c, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x7f8a4fe5d0, lpData=0x7f8a4fe5f0, lpcbData=0x7f8a4fe5d4*=0x1000 | out: lpType=0x7f8a4fe5d0*=0x4, lpData=0x7f8a4fe5f0*=0x40, lpcbData=0x7f8a4fe5d4*=0x4) returned 0x0 [0121.867] RegQueryValueExW (in: hKey=0x7c, lpValueName="AutoRun", lpReserved=0x0, lpType=0x7f8a4fe5d0, lpData=0x7f8a4fe5f0, lpcbData=0x7f8a4fe5d4*=0x1000 | out: lpType=0x7f8a4fe5d0*=0x0, lpData=0x7f8a4fe5f0*=0x40, lpcbData=0x7f8a4fe5d4*=0x1000) returned 0x2 [0121.868] RegCloseKey (hKey=0x7c) returned 0x0 [0121.868] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x7f8a4fe5d8 | out: phkResult=0x7f8a4fe5d8*=0x7c) returned 0x0 [0121.868] RegQueryValueExW (in: hKey=0x7c, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x7f8a4fe5d0, lpData=0x7f8a4fe5f0, lpcbData=0x7f8a4fe5d4*=0x1000 | out: lpType=0x7f8a4fe5d0*=0x0, lpData=0x7f8a4fe5f0*=0x40, lpcbData=0x7f8a4fe5d4*=0x1000) returned 0x2 [0121.868] RegQueryValueExW (in: hKey=0x7c, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x7f8a4fe5d0, lpData=0x7f8a4fe5f0, lpcbData=0x7f8a4fe5d4*=0x1000 | out: lpType=0x7f8a4fe5d0*=0x4, lpData=0x7f8a4fe5f0*=0x1, lpcbData=0x7f8a4fe5d4*=0x4) returned 0x0 [0121.868] RegQueryValueExW (in: hKey=0x7c, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x7f8a4fe5d0, lpData=0x7f8a4fe5f0, lpcbData=0x7f8a4fe5d4*=0x1000 | out: lpType=0x7f8a4fe5d0*=0x0, lpData=0x7f8a4fe5f0*=0x1, lpcbData=0x7f8a4fe5d4*=0x1000) returned 0x2 [0121.868] RegQueryValueExW (in: hKey=0x7c, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x7f8a4fe5d0, lpData=0x7f8a4fe5f0, lpcbData=0x7f8a4fe5d4*=0x1000 | out: lpType=0x7f8a4fe5d0*=0x4, lpData=0x7f8a4fe5f0*=0x0, lpcbData=0x7f8a4fe5d4*=0x4) returned 0x0 [0121.868] RegQueryValueExW (in: hKey=0x7c, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x7f8a4fe5d0, lpData=0x7f8a4fe5f0, lpcbData=0x7f8a4fe5d4*=0x1000 | out: lpType=0x7f8a4fe5d0*=0x4, lpData=0x7f8a4fe5f0*=0x9, lpcbData=0x7f8a4fe5d4*=0x4) returned 0x0 [0121.868] RegQueryValueExW (in: hKey=0x7c, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x7f8a4fe5d0, lpData=0x7f8a4fe5f0, lpcbData=0x7f8a4fe5d4*=0x1000 | out: lpType=0x7f8a4fe5d0*=0x4, lpData=0x7f8a4fe5f0*=0x9, lpcbData=0x7f8a4fe5d4*=0x4) returned 0x0 [0121.868] RegQueryValueExW (in: hKey=0x7c, lpValueName="AutoRun", lpReserved=0x0, lpType=0x7f8a4fe5d0, lpData=0x7f8a4fe5f0, lpcbData=0x7f8a4fe5d4*=0x1000 | out: lpType=0x7f8a4fe5d0*=0x0, lpData=0x7f8a4fe5f0*=0x9, lpcbData=0x7f8a4fe5d4*=0x1000) returned 0x2 [0121.868] RegCloseKey (hKey=0x7c) returned 0x0 [0121.869] time (in: timer=0x0 | out: timer=0x0) returned 0x5e0c855f [0121.869] srand (_Seed=0x5e0c855f) [0121.869] GetCommandLineW () returned="\"C:\\WINDOWS\\system32\\cmd.exe\"" [0121.869] malloc (_Size=0x4000) returned 0x184844d54f0 [0121.870] GetCommandLineW () returned="\"C:\\WINDOWS\\system32\\cmd.exe\"" [0121.871] malloc (_Size=0xffce) returned 0x18484380080 [0121.872] ??_V@YAXPEAX@Z () returned 0x18484380080 [0121.873] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x18484380080 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0121.873] malloc (_Size=0xffce) returned 0x18484390060 [0121.874] ??_V@YAXPEAX@Z () returned 0x18484390060 [0121.875] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18484390060, nSize=0x7fe7 | out: lpFilename="C:\\WINDOWS\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe")) returned 0x1b [0121.876] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x7ff7ca66bb90, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0121.876] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff7ca66bb90, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0121.876] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x7ff7ca66bb90, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0121.876] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0121.880] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0121.880] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0121.880] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0121.880] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0121.880] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0121.880] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0121.880] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0121.881] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0121.881] GetProcessHeap () returned 0x18484280000 [0121.881] RtlFreeHeap (HeapHandle=0x18484280000, Flags=0x0, BaseAddress=0x18484286530) returned 1 [0121.881] GetEnvironmentStringsW () returned 0x18484285aa0* [0121.881] GetProcessHeap () returned 0x18484280000 [0121.881] RtlAllocateHeap (HeapHandle=0x18484280000, Flags=0x8, Size=0xa94) returned 0x18484287a60 [0121.881] FreeEnvironmentStringsA (penv="A") returned 1 [0121.882] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x7ff7ca66bb90, nSize=0x2000 | out: lpBuffer="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1b [0121.882] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x7ff7ca66bb90, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0121.882] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0121.882] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0121.882] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0121.882] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0121.882] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0121.882] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0121.882] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0121.882] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0121.882] malloc (_Size=0xffce) returned 0x184843a0040 [0121.883] ??_V@YAXPEAX@Z () returned 0x184843a0040 [0121.885] GetProcessHeap () returned 0x18484280000 [0121.885] RtlAllocateHeap (HeapHandle=0x18484280000, Flags=0x8, Size=0x40) returned 0x18484283d30 [0121.885] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x184843a0040 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0121.886] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x7fe7, lpBuffer=0x184843a0040, lpFilePart=0x7f8a4ff150 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x7f8a4ff150*="Desktop") returned 0x17 [0121.887] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0121.887] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x7f8a4fee80 | out: lpFindFileData=0x7f8a4fee80*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x18484288500 [0121.888] FindClose (in: hFindFile=0x18484288500 | out: hFindFile=0x18484288500) returned 1 [0121.888] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy", lpFindFileData=0x7f8a4fee80 | out: lpFindFileData=0x7f8a4fee80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9de5855d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9de5855d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD1HVy", cAlternateFileName="")) returned 0x18484288500 [0121.889] FindClose (in: hFindFile=0x18484288500 | out: hFindFile=0x18484288500) returned 1 [0121.889] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", lpFindFileData=0x7f8a4fee80 | out: lpFindFileData=0x7f8a4fee80*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x2bbded28, ftLastAccessTime.dwHighDateTime=0x1d5c098, ftLastWriteTime.dwLowDateTime=0x2bbded28, ftLastWriteTime.dwHighDateTime=0x1d5c098, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x18484288500 [0121.890] FindClose (in: hFindFile=0x18484288500 | out: hFindFile=0x18484288500) returned 1 [0121.890] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0121.890] SetCurrentDirectoryW (lpPathName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 1 [0121.890] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\FD1HVy\\Desktop") returned 1 [0121.890] GetProcessHeap () returned 0x18484280000 [0121.890] RtlFreeHeap (HeapHandle=0x18484280000, Flags=0x0, BaseAddress=0x18484287a60) returned 1 [0121.890] GetEnvironmentStringsW () returned 0x18484280fc0* [0121.890] GetProcessHeap () returned 0x18484280000 [0121.890] RtlAllocateHeap (HeapHandle=0x18484280000, Flags=0x8, Size=0xacc) returned 0x18484287a60 [0121.891] FreeEnvironmentStringsA (penv="=") returned 1 [0121.891] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x18484380080 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0121.891] GetProcessHeap () returned 0x18484280000 [0121.891] RtlFreeHeap (HeapHandle=0x18484280000, Flags=0x0, BaseAddress=0x18484283d30) returned 1 [0121.891] ??_V@YAXPEAX@Z () returned 0x1 [0121.891] ??_V@YAXPEAX@Z () returned 0x1 [0121.891] GetProcessHeap () returned 0x18484280000 [0121.891] RtlAllocateHeap (HeapHandle=0x18484280000, Flags=0x8, Size=0x4016) returned 0x18484288540 [0121.892] GetProcessHeap () returned 0x18484280000 [0121.892] RtlFreeHeap (HeapHandle=0x18484280000, Flags=0x0, BaseAddress=0x18484288540) returned 1 [0121.893] GetConsoleOutputCP () returned 0x1b5 [0122.596] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff7ca66fbb0 | out: lpCPInfo=0x7ff7ca66fbb0) returned 1 [0122.596] GetUserDefaultLCID () returned 0x409 [0122.600] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x7ff7ca66bb78, cchData=8 | out: lpLCData=":") returned 2 [0122.601] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x7f8a4ff510, cchData=128 | out: lpLCData="0") returned 2 [0122.601] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x7f8a4ff510, cchData=128 | out: lpLCData="0") returned 2 [0122.601] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x7f8a4ff510, cchData=128 | out: lpLCData="1") returned 2 [0122.601] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x7ff7ca66bb68, cchData=8 | out: lpLCData="/") returned 2 [0122.601] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x7ff7ca66bb00, cchData=32 | out: lpLCData="Mon") returned 4 [0122.601] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x7ff7ca66bac0, cchData=32 | out: lpLCData="Tue") returned 4 [0122.601] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x7ff7ca66ba80, cchData=32 | out: lpLCData="Wed") returned 4 [0122.601] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x7ff7ca66ba40, cchData=32 | out: lpLCData="Thu") returned 4 [0122.601] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x7ff7ca66ba00, cchData=32 | out: lpLCData="Fri") returned 4 [0122.601] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x7ff7ca66b9c0, cchData=32 | out: lpLCData="Sat") returned 4 [0122.602] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x7ff7ca66b980, cchData=32 | out: lpLCData="Sun") returned 4 [0122.602] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x7ff7ca66bb58, cchData=8 | out: lpLCData=".") returned 2 [0122.602] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x7ff7ca66bb40, cchData=8 | out: lpLCData=",") returned 2 [0122.602] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0122.609] GetProcessHeap () returned 0x18484280000 [0122.609] RtlAllocateHeap (HeapHandle=0x18484280000, Flags=0x0, Size=0x20c) returned 0x184842865f0 [0122.609] GetConsoleTitleW (in: lpConsoleTitle=0x184842865f0, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0123.190] _get_osfhandle (_FileHandle=1) returned 0x25c [0123.190] GetFileType (hFile=0x25c) returned 0x3 [0123.193] ApiSetQueryApiSetPresence () returned 0x0 [0123.194] ResolveDelayLoadedAPI () returned 0x7ff9258dd990 [0123.699] BrandingFormatString () returned 0x18484281850 [0123.724] GetVersion () returned 0x3ad7000a [0123.724] _vsnwprintf (in: _Buffer=0x7f8a4ff670, _BufferCount=0x1f, _Format="%d.%d.%04d", _ArgList=0x7f8a4ff608 | out: _Buffer="10.0.15063") returned 10 [0123.725] _get_osfhandle (_FileHandle=1) returned 0x25c [0123.725] GetFileType (hFile=0x25c) returned 0x3 [0123.725] FormatMessageW (in: dwFlags=0x1a00, lpSource=0x0, dwMessageId=0x2350, dwLanguageId=0x0, lpBuffer=0x7ff7ca677f60, nSize=0x2000, Arguments=0x0 | out: lpBuffer="Microsoft Windows [Version %1]") returned 0x1e [0123.727] FormatMessageW (in: dwFlags=0x1800, lpSource=0x0, dwMessageId=0x2350, dwLanguageId=0x0, lpBuffer=0x7ff7ca677f60, nSize=0x2000, Arguments=0x7f8a4ff610 | out: lpBuffer="Microsoft Windows [Version 10.0.15063]") returned 0x26 [0123.727] _get_osfhandle (_FileHandle=1) returned 0x25c [0123.727] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Windows [Version 10.0.15063]", cchWideChar=-1, lpMultiByteStr=0x7ff7ca669970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Windows [Version 10.0.15063]", lpUsedDefaultChar=0x0) returned 39 [0123.727] WriteFile (in: hFile=0x25c, lpBuffer=0x7ff7ca669970*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x7f8a4ff568, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ca669970*, lpNumberOfBytesWritten=0x7f8a4ff568*=0x26, lpOverlapped=0x0) returned 1 [0123.727] _vsnwprintf (in: _Buffer=0x7ff7ca677f60, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x7f8a4ff638 | out: _Buffer="\r\n") returned 2 [0123.727] _get_osfhandle (_FileHandle=1) returned 0x25c [0123.727] GetFileType (hFile=0x25c) returned 0x3 [0123.727] _get_osfhandle (_FileHandle=1) returned 0x25c [0123.727] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x7ff7ca669970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3 [0123.728] WriteFile (in: hFile=0x25c, lpBuffer=0x7ff7ca669970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x7f8a4ff608, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ca669970*, lpNumberOfBytesWritten=0x7f8a4ff608*=0x2, lpOverlapped=0x0) returned 1 [0123.728] _vsnwprintf (in: _Buffer=0x7ff7ca677f60, _BufferCount=0x1fff, _Format="%s", _ArgList=0x7f8a4ff638 | out: _Buffer="(c) 2017 Microsoft Corporation. All rights reserved.") returned 52 [0123.728] _get_osfhandle (_FileHandle=1) returned 0x25c [0123.728] GetFileType (hFile=0x25c) returned 0x3 [0123.728] _get_osfhandle (_FileHandle=1) returned 0x25c [0123.728] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="(c) 2017 Microsoft Corporation. All rights reserved.", cchWideChar=-1, lpMultiByteStr=0x7ff7ca669970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="(c) 2017 Microsoft Corporation. All rights reserved.", lpUsedDefaultChar=0x0) returned 53 [0123.728] WriteFile (in: hFile=0x25c, lpBuffer=0x7ff7ca669970*, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0x7f8a4ff608, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ca669970*, lpNumberOfBytesWritten=0x7f8a4ff608*=0x34, lpOverlapped=0x0) returned 1 [0123.728] _vsnwprintf (in: _Buffer=0x7ff7ca677f60, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x7f8a4ff638 | out: _Buffer="\r\n") returned 2 [0123.728] _get_osfhandle (_FileHandle=1) returned 0x25c [0123.728] GetFileType (hFile=0x25c) returned 0x3 [0123.728] _get_osfhandle (_FileHandle=1) returned 0x25c [0123.729] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x7ff7ca669970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3 [0123.729] WriteFile (in: hFile=0x25c, lpBuffer=0x7ff7ca669970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x7f8a4ff608, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ca669970*, lpNumberOfBytesWritten=0x7f8a4ff608*=0x2, lpOverlapped=0x0) returned 1 [0123.729] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x7ff92fdd0000 [0123.729] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CopyFileExW") returned 0x7ff92fdee830 [0123.729] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="IsDebuggerPresent") returned 0x7ff92fdee300 [0123.730] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="SetConsoleInputExeNameW") returned 0x7ff92f1b0a40 [0123.730] ??_V@YAXPEAX@Z () returned 0x1 [0123.731] _get_osfhandle (_FileHandle=0) returned 0x258 [0123.731] GetFileType (hFile=0x258) returned 0x3 [0123.731] _setmode (_FileHandle=0, _Mode=32768) returned 16384 [0123.731] NtOpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x8, OpenAsSelf=0, TokenHandle=0x7f8a4ff478 | out: TokenHandle=0x7f8a4ff478*=0x0) returned 0xc000007c [0123.731] NtOpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x8, TokenHandle=0x7f8a4ff478 | out: TokenHandle=0x7f8a4ff478*=0x94) returned 0x0 [0123.732] NtQueryInformationToken (in: TokenHandle=0x94, TokenInformationClass=0x12, TokenInformation=0x7f8a4ff428, TokenInformationLength=0x4, ReturnLength=0x7f8a4ff430 | out: TokenInformation=0x7f8a4ff428, ReturnLength=0x7f8a4ff430) returned 0x0 [0123.732] NtQueryInformationToken (in: TokenHandle=0x94, TokenInformationClass=0x1a, TokenInformation=0x7f8a4ff430, TokenInformationLength=0x4, ReturnLength=0x7f8a4ff428 | out: TokenInformation=0x7f8a4ff430, ReturnLength=0x7f8a4ff428) returned 0x0 [0123.732] NtClose (Handle=0x94) returned 0x0 [0123.732] FormatMessageW (in: dwFlags=0x1900, lpSource=0x0, dwMessageId=0x40002748, dwLanguageId=0x0, lpBuffer=0x7f8a4ff440, nSize=0x0, Arguments=0x7f8a4ff448 | out: lpBuffer="汰萨Ƅ") returned 0xf [0123.732] GetProcessHeap () returned 0x18484280000 [0123.733] RtlAllocateHeap (HeapHandle=0x18484280000, Flags=0x8, Size=0x218) returned 0x18484286ca0 [0124.112] GetConsoleTitleW (in: lpConsoleTitle=0x7f8a4ff490, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0124.762] wcsstr (_Str="C:\\WINDOWS\\system32\\cmd.exe", _SubStr="Administrator: ") returned 0x0 [0124.762] SetConsoleTitleW (lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe") returned 1 [0125.559] GetProcessHeap () returned 0x18484280000 [0125.559] RtlFreeHeap (HeapHandle=0x18484280000, Flags=0x0, BaseAddress=0x18484286ca0) returned 1 [0125.560] LocalFree (hMem=0x18484286c70) returned 0x0 [0125.566] _vsnwprintf (in: _Buffer=0x7ff7ca677f60, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x7f8a4ff2b8 | out: _Buffer="\r\n") returned 2 [0125.566] _get_osfhandle (_FileHandle=1) returned 0x25c [0125.566] GetFileType (hFile=0x25c) returned 0x3 [0125.566] _get_osfhandle (_FileHandle=1) returned 0x25c [0125.566] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x7ff7ca669970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3 [0125.566] WriteFile (in: hFile=0x25c, lpBuffer=0x7ff7ca669970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x7f8a4ff288, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ca669970*, lpNumberOfBytesWritten=0x7f8a4ff288*=0x2, lpOverlapped=0x0) returned 1 [0125.567] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x7ff7ca66bb90, nSize=0x2000 | out: lpBuffer="$P$G") returned 0x4 [0125.567] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x18484380080 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0125.567] malloc (_Size=0x107ce) returned 0x18484390060 [0125.569] _vsnwprintf (in: _Buffer=0x18484390060, _BufferCount=0x83e5, _Format="%s", _ArgList=0x7f8a4ff2c8 | out: _Buffer="C:\\Users\\FD1HVy\\Desktop") returned 23 [0125.569] _vsnwprintf (in: _Buffer=0x1848439008e, _BufferCount=0x83ce, _Format="%c", _ArgList=0x7f8a4ff2c8 | out: _Buffer=">") returned 1 [0125.569] _get_osfhandle (_FileHandle=1) returned 0x25c [0125.569] GetFileType (hFile=0x25c) returned 0x3 [0125.569] _get_osfhandle (_FileHandle=1) returned 0x25c [0125.570] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Users\\FD1HVy\\Desktop>", cchWideChar=-1, lpMultiByteStr=0x7ff7ca669970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\FD1HVy\\Desktop>", lpUsedDefaultChar=0x0) returned 25 [0125.570] WriteFile (in: hFile=0x25c, lpBuffer=0x7ff7ca669970*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x7f8a4ff2b8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ca669970*, lpNumberOfBytesWritten=0x7f8a4ff2b8*=0x18, lpOverlapped=0x0) returned 1 [0125.570] _get_osfhandle (_FileHandle=0) returned 0x258 [0125.570] GetFileType (hFile=0x258) returned 0x3 [0125.570] _get_osfhandle (_FileHandle=0) returned 0x258 [0125.570] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.571] ReadFile (in: hFile=0x258, lpBuffer=0x7ff7ca669970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x7f8a4ff618, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ca669970*, lpNumberOfBytesRead=0x7f8a4ff618*=0x1, lpOverlapped=0x0) returned 1 [0125.571] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ca669970, cbMultiByte=1, lpWideCharStr=0x7ff7ca673c30, cchWideChar=1 | out: lpWideCharStr="n") returned 1 [0125.571] _get_osfhandle (_FileHandle=0) returned 0x258 [0125.571] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.571] ReadFile (in: hFile=0x258, lpBuffer=0x7ff7ca669970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x7f8a4ff618, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ca669970*, lpNumberOfBytesRead=0x7f8a4ff618*=0x1, lpOverlapped=0x0) returned 1 [0125.572] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ca669970, cbMultiByte=1, lpWideCharStr=0x7ff7ca673c32, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0125.572] _get_osfhandle (_FileHandle=0) returned 0x258 [0125.572] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.572] ReadFile (in: hFile=0x258, lpBuffer=0x7ff7ca669970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x7f8a4ff618, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ca669970*, lpNumberOfBytesRead=0x7f8a4ff618*=0x1, lpOverlapped=0x0) returned 1 [0125.572] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ca669970, cbMultiByte=1, lpWideCharStr=0x7ff7ca673c34, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0125.572] _get_osfhandle (_FileHandle=0) returned 0x258 [0125.572] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.572] ReadFile (in: hFile=0x258, lpBuffer=0x7ff7ca669970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x7f8a4ff618, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ca669970*, lpNumberOfBytesRead=0x7f8a4ff618*=0x1, lpOverlapped=0x0) returned 1 [0125.573] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ca669970, cbMultiByte=1, lpWideCharStr=0x7ff7ca673c36, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0125.573] _get_osfhandle (_FileHandle=0) returned 0x258 [0125.573] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.573] ReadFile (in: hFile=0x258, lpBuffer=0x7ff7ca669970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x7f8a4ff618, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ca669970*, lpNumberOfBytesRead=0x7f8a4ff618*=0x1, lpOverlapped=0x0) returned 1 [0125.573] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ca669970, cbMultiByte=1, lpWideCharStr=0x7ff7ca673c38, cchWideChar=1 | out: lpWideCharStr="h") returned 1 [0125.573] _get_osfhandle (_FileHandle=0) returned 0x258 [0125.573] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.573] ReadFile (in: hFile=0x258, lpBuffer=0x7ff7ca669970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x7f8a4ff618, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ca669970*, lpNumberOfBytesRead=0x7f8a4ff618*=0x1, lpOverlapped=0x0) returned 1 [0125.573] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ca669970, cbMultiByte=1, lpWideCharStr=0x7ff7ca673c3a, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0125.573] _get_osfhandle (_FileHandle=0) returned 0x258 [0125.573] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.574] ReadFile (in: hFile=0x258, lpBuffer=0x7ff7ca669970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x7f8a4ff618, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ca669970*, lpNumberOfBytesRead=0x7f8a4ff618*=0x1, lpOverlapped=0x0) returned 1 [0125.575] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ca669970, cbMultiByte=1, lpWideCharStr=0x7ff7ca673c3c, cchWideChar=1 | out: lpWideCharStr="a") returned 1 [0125.575] _get_osfhandle (_FileHandle=0) returned 0x258 [0125.575] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.575] ReadFile (in: hFile=0x258, lpBuffer=0x7ff7ca669970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x7f8a4ff618, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ca669970*, lpNumberOfBytesRead=0x7f8a4ff618*=0x1, lpOverlapped=0x0) returned 1 [0125.575] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ca669970, cbMultiByte=1, lpWideCharStr=0x7ff7ca673c3e, cchWideChar=1 | out: lpWideCharStr="d") returned 1 [0125.575] _get_osfhandle (_FileHandle=0) returned 0x258 [0125.575] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.576] ReadFile (in: hFile=0x258, lpBuffer=0x7ff7ca669970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x7f8a4ff618, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ca669970*, lpNumberOfBytesRead=0x7f8a4ff618*=0x1, lpOverlapped=0x0) returned 1 [0125.576] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ca669970, cbMultiByte=1, lpWideCharStr=0x7ff7ca673c40, cchWideChar=1 | out: lpWideCharStr="v") returned 1 [0125.576] _get_osfhandle (_FileHandle=0) returned 0x258 [0125.576] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.576] ReadFile (in: hFile=0x258, lpBuffer=0x7ff7ca669970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x7f8a4ff618, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ca669970*, lpNumberOfBytesRead=0x7f8a4ff618*=0x1, lpOverlapped=0x0) returned 1 [0125.576] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ca669970, cbMultiByte=1, lpWideCharStr=0x7ff7ca673c42, cchWideChar=1 | out: lpWideCharStr="f") returned 1 [0125.576] _get_osfhandle (_FileHandle=0) returned 0x258 [0125.576] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.576] ReadFile (in: hFile=0x258, lpBuffer=0x7ff7ca669970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x7f8a4ff618, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ca669970*, lpNumberOfBytesRead=0x7f8a4ff618*=0x1, lpOverlapped=0x0) returned 1 [0125.577] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ca669970, cbMultiByte=1, lpWideCharStr=0x7ff7ca673c44, cchWideChar=1 | out: lpWideCharStr="i") returned 1 [0125.577] _get_osfhandle (_FileHandle=0) returned 0x258 [0125.577] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.577] ReadFile (in: hFile=0x258, lpBuffer=0x7ff7ca669970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x7f8a4ff618, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ca669970*, lpNumberOfBytesRead=0x7f8a4ff618*=0x1, lpOverlapped=0x0) returned 1 [0125.577] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ca669970, cbMultiByte=1, lpWideCharStr=0x7ff7ca673c46, cchWideChar=1 | out: lpWideCharStr="r") returned 1 [0125.577] _get_osfhandle (_FileHandle=0) returned 0x258 [0125.577] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.577] ReadFile (in: hFile=0x258, lpBuffer=0x7ff7ca669970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x7f8a4ff618, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ca669970*, lpNumberOfBytesRead=0x7f8a4ff618*=0x1, lpOverlapped=0x0) returned 1 [0125.577] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ca669970, cbMultiByte=1, lpWideCharStr=0x7ff7ca673c48, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0125.577] _get_osfhandle (_FileHandle=0) returned 0x258 [0125.577] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.578] ReadFile (in: hFile=0x258, lpBuffer=0x7ff7ca669970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x7f8a4ff618, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ca669970*, lpNumberOfBytesRead=0x7f8a4ff618*=0x1, lpOverlapped=0x0) returned 1 [0125.578] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ca669970, cbMultiByte=1, lpWideCharStr=0x7ff7ca673c4a, cchWideChar=1 | out: lpWideCharStr="w") returned 1 [0125.578] _get_osfhandle (_FileHandle=0) returned 0x258 [0125.578] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.578] ReadFile (in: hFile=0x258, lpBuffer=0x7ff7ca669970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x7f8a4ff618, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ca669970*, lpNumberOfBytesRead=0x7f8a4ff618*=0x1, lpOverlapped=0x0) returned 1 [0125.578] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ca669970, cbMultiByte=1, lpWideCharStr=0x7ff7ca673c4c, cchWideChar=1 | out: lpWideCharStr="a") returned 1 [0125.578] _get_osfhandle (_FileHandle=0) returned 0x258 [0125.578] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.579] ReadFile (in: hFile=0x258, lpBuffer=0x7ff7ca669970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x7f8a4ff618, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ca669970*, lpNumberOfBytesRead=0x7f8a4ff618*=0x1, lpOverlapped=0x0) returned 1 [0125.579] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ca669970, cbMultiByte=1, lpWideCharStr=0x7ff7ca673c4e, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0125.579] _get_osfhandle (_FileHandle=0) returned 0x258 [0125.579] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.579] ReadFile (in: hFile=0x258, lpBuffer=0x7ff7ca669970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x7f8a4ff618, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ca669970*, lpNumberOfBytesRead=0x7f8a4ff618*=0x1, lpOverlapped=0x0) returned 1 [0125.579] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ca669970, cbMultiByte=1, lpWideCharStr=0x7ff7ca673c50, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0125.579] _get_osfhandle (_FileHandle=0) returned 0x258 [0125.579] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.580] ReadFile (in: hFile=0x258, lpBuffer=0x7ff7ca669970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x7f8a4ff618, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ca669970*, lpNumberOfBytesRead=0x7f8a4ff618*=0x1, lpOverlapped=0x0) returned 1 [0125.580] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ca669970, cbMultiByte=1, lpWideCharStr=0x7ff7ca673c52, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0125.580] _get_osfhandle (_FileHandle=0) returned 0x258 [0125.580] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.580] ReadFile (in: hFile=0x258, lpBuffer=0x7ff7ca669970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x7f8a4ff618, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ca669970*, lpNumberOfBytesRead=0x7f8a4ff618*=0x1, lpOverlapped=0x0) returned 1 [0125.580] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ca669970, cbMultiByte=1, lpWideCharStr=0x7ff7ca673c54, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0125.580] _get_osfhandle (_FileHandle=0) returned 0x258 [0125.580] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.580] ReadFile (in: hFile=0x258, lpBuffer=0x7ff7ca669970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x7f8a4ff618, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ca669970*, lpNumberOfBytesRead=0x7f8a4ff618*=0x1, lpOverlapped=0x0) returned 1 [0125.580] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ca669970, cbMultiByte=1, lpWideCharStr=0x7ff7ca673c56, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0125.581] _get_osfhandle (_FileHandle=0) returned 0x258 [0125.581] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.581] ReadFile (in: hFile=0x258, lpBuffer=0x7ff7ca669970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x7f8a4ff618, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ca669970*, lpNumberOfBytesRead=0x7f8a4ff618*=0x1, lpOverlapped=0x0) returned 1 [0125.581] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ca669970, cbMultiByte=1, lpWideCharStr=0x7ff7ca673c58, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0125.581] _get_osfhandle (_FileHandle=0) returned 0x258 [0125.581] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.581] ReadFile (in: hFile=0x258, lpBuffer=0x7ff7ca669970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x7f8a4ff618, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ca669970*, lpNumberOfBytesRead=0x7f8a4ff618*=0x1, lpOverlapped=0x0) returned 1 [0125.581] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ca669970, cbMultiByte=1, lpWideCharStr=0x7ff7ca673c5a, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0125.581] _get_osfhandle (_FileHandle=0) returned 0x258 [0125.581] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.582] ReadFile (in: hFile=0x258, lpBuffer=0x7ff7ca669970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x7f8a4ff618, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ca669970*, lpNumberOfBytesRead=0x7f8a4ff618*=0x1, lpOverlapped=0x0) returned 1 [0125.582] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ca669970, cbMultiByte=1, lpWideCharStr=0x7ff7ca673c5c, cchWideChar=1 | out: lpWideCharStr="c") returned 1 [0125.582] _get_osfhandle (_FileHandle=0) returned 0x258 [0125.582] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.582] ReadFile (in: hFile=0x258, lpBuffer=0x7ff7ca669970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x7f8a4ff618, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ca669970*, lpNumberOfBytesRead=0x7f8a4ff618*=0x1, lpOverlapped=0x0) returned 1 [0125.582] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ca669970, cbMultiByte=1, lpWideCharStr=0x7ff7ca673c5e, cchWideChar=1 | out: lpWideCharStr="u") returned 1 [0125.582] _get_osfhandle (_FileHandle=0) returned 0x258 [0125.582] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.582] ReadFile (in: hFile=0x258, lpBuffer=0x7ff7ca669970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x7f8a4ff618, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ca669970*, lpNumberOfBytesRead=0x7f8a4ff618*=0x1, lpOverlapped=0x0) returned 1 [0125.583] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ca669970, cbMultiByte=1, lpWideCharStr=0x7ff7ca673c60, cchWideChar=1 | out: lpWideCharStr="r") returned 1 [0125.583] _get_osfhandle (_FileHandle=0) returned 0x258 [0125.583] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.583] ReadFile (in: hFile=0x258, lpBuffer=0x7ff7ca669970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x7f8a4ff618, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ca669970*, lpNumberOfBytesRead=0x7f8a4ff618*=0x1, lpOverlapped=0x0) returned 1 [0125.583] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ca669970, cbMultiByte=1, lpWideCharStr=0x7ff7ca673c62, cchWideChar=1 | out: lpWideCharStr="r") returned 1 [0125.583] _get_osfhandle (_FileHandle=0) returned 0x258 [0125.583] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.583] ReadFile (in: hFile=0x258, lpBuffer=0x7ff7ca669970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x7f8a4ff618, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ca669970*, lpNumberOfBytesRead=0x7f8a4ff618*=0x1, lpOverlapped=0x0) returned 1 [0125.584] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ca669970, cbMultiByte=1, lpWideCharStr=0x7ff7ca673c64, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0125.584] _get_osfhandle (_FileHandle=0) returned 0x258 [0125.584] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.584] ReadFile (in: hFile=0x258, lpBuffer=0x7ff7ca669970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x7f8a4ff618, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ca669970*, lpNumberOfBytesRead=0x7f8a4ff618*=0x1, lpOverlapped=0x0) returned 1 [0125.584] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ca669970, cbMultiByte=1, lpWideCharStr=0x7ff7ca673c66, cchWideChar=1 | out: lpWideCharStr="n") returned 1 [0125.584] _get_osfhandle (_FileHandle=0) returned 0x258 [0125.584] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.584] ReadFile (in: hFile=0x258, lpBuffer=0x7ff7ca669970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x7f8a4ff618, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ca669970*, lpNumberOfBytesRead=0x7f8a4ff618*=0x1, lpOverlapped=0x0) returned 1 [0125.584] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ca669970, cbMultiByte=1, lpWideCharStr=0x7ff7ca673c68, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0125.584] _get_osfhandle (_FileHandle=0) returned 0x258 [0125.584] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.585] ReadFile (in: hFile=0x258, lpBuffer=0x7ff7ca669970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x7f8a4ff618, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ca669970*, lpNumberOfBytesRead=0x7f8a4ff618*=0x1, lpOverlapped=0x0) returned 1 [0125.585] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ca669970, cbMultiByte=1, lpWideCharStr=0x7ff7ca673c6a, cchWideChar=1 | out: lpWideCharStr="p") returned 1 [0125.585] _get_osfhandle (_FileHandle=0) returned 0x258 [0125.585] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.585] ReadFile (in: hFile=0x258, lpBuffer=0x7ff7ca669970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x7f8a4ff618, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ca669970*, lpNumberOfBytesRead=0x7f8a4ff618*=0x1, lpOverlapped=0x0) returned 1 [0125.585] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ca669970, cbMultiByte=1, lpWideCharStr=0x7ff7ca673c6c, cchWideChar=1 | out: lpWideCharStr="r") returned 1 [0125.585] _get_osfhandle (_FileHandle=0) returned 0x258 [0125.585] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.586] ReadFile (in: hFile=0x258, lpBuffer=0x7ff7ca669970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x7f8a4ff618, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ca669970*, lpNumberOfBytesRead=0x7f8a4ff618*=0x1, lpOverlapped=0x0) returned 1 [0125.586] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ca669970, cbMultiByte=1, lpWideCharStr=0x7ff7ca673c6e, cchWideChar=1 | out: lpWideCharStr="o") returned 1 [0125.586] _get_osfhandle (_FileHandle=0) returned 0x258 [0125.586] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.586] ReadFile (in: hFile=0x258, lpBuffer=0x7ff7ca669970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x7f8a4ff618, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ca669970*, lpNumberOfBytesRead=0x7f8a4ff618*=0x1, lpOverlapped=0x0) returned 1 [0125.586] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ca669970, cbMultiByte=1, lpWideCharStr=0x7ff7ca673c70, cchWideChar=1 | out: lpWideCharStr="f") returned 1 [0125.586] _get_osfhandle (_FileHandle=0) returned 0x258 [0125.586] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.586] ReadFile (in: hFile=0x258, lpBuffer=0x7ff7ca669970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x7f8a4ff618, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ca669970*, lpNumberOfBytesRead=0x7f8a4ff618*=0x1, lpOverlapped=0x0) returned 1 [0125.587] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ca669970, cbMultiByte=1, lpWideCharStr=0x7ff7ca673c72, cchWideChar=1 | out: lpWideCharStr="i") returned 1 [0125.587] _get_osfhandle (_FileHandle=0) returned 0x258 [0125.587] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.587] ReadFile (in: hFile=0x258, lpBuffer=0x7ff7ca669970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x7f8a4ff618, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ca669970*, lpNumberOfBytesRead=0x7f8a4ff618*=0x1, lpOverlapped=0x0) returned 1 [0125.587] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ca669970, cbMultiByte=1, lpWideCharStr=0x7ff7ca673c74, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0125.587] _get_osfhandle (_FileHandle=0) returned 0x258 [0125.587] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.587] ReadFile (in: hFile=0x258, lpBuffer=0x7ff7ca669970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x7f8a4ff618, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ca669970*, lpNumberOfBytesRead=0x7f8a4ff618*=0x1, lpOverlapped=0x0) returned 1 [0125.587] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ca669970, cbMultiByte=1, lpWideCharStr=0x7ff7ca673c76, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0125.587] _get_osfhandle (_FileHandle=0) returned 0x258 [0125.588] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.588] ReadFile (in: hFile=0x258, lpBuffer=0x7ff7ca669970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x7f8a4ff618, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ca669970*, lpNumberOfBytesRead=0x7f8a4ff618*=0x1, lpOverlapped=0x0) returned 1 [0125.588] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ca669970, cbMultiByte=1, lpWideCharStr=0x7ff7ca673c78, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0125.588] _get_osfhandle (_FileHandle=0) returned 0x258 [0125.588] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.588] ReadFile (in: hFile=0x258, lpBuffer=0x7ff7ca669970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x7f8a4ff618, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ca669970*, lpNumberOfBytesRead=0x7f8a4ff618*=0x1, lpOverlapped=0x0) returned 1 [0125.588] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ca669970, cbMultiByte=1, lpWideCharStr=0x7ff7ca673c7a, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0125.588] _get_osfhandle (_FileHandle=0) returned 0x258 [0125.588] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.589] ReadFile (in: hFile=0x258, lpBuffer=0x7ff7ca669970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x7f8a4ff618, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ca669970*, lpNumberOfBytesRead=0x7f8a4ff618*=0x1, lpOverlapped=0x0) returned 1 [0125.589] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ca669970, cbMultiByte=1, lpWideCharStr=0x7ff7ca673c7c, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0125.589] _get_osfhandle (_FileHandle=0) returned 0x258 [0125.589] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.589] ReadFile (in: hFile=0x258, lpBuffer=0x7ff7ca669970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x7f8a4ff618, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ca669970*, lpNumberOfBytesRead=0x7f8a4ff618*=0x1, lpOverlapped=0x0) returned 1 [0125.589] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ca669970, cbMultiByte=1, lpWideCharStr=0x7ff7ca673c7e, cchWideChar=1 | out: lpWideCharStr="a") returned 1 [0125.589] _get_osfhandle (_FileHandle=0) returned 0x258 [0125.589] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.590] ReadFile (in: hFile=0x258, lpBuffer=0x7ff7ca669970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x7f8a4ff618, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ca669970*, lpNumberOfBytesRead=0x7f8a4ff618*=0x1, lpOverlapped=0x0) returned 1 [0125.590] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ca669970, cbMultiByte=1, lpWideCharStr=0x7ff7ca673c80, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0125.590] _get_osfhandle (_FileHandle=0) returned 0x258 [0125.590] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.590] ReadFile (in: hFile=0x258, lpBuffer=0x7ff7ca669970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x7f8a4ff618, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ca669970*, lpNumberOfBytesRead=0x7f8a4ff618*=0x1, lpOverlapped=0x0) returned 1 [0125.590] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ca669970, cbMultiByte=1, lpWideCharStr=0x7ff7ca673c82, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0125.590] _get_osfhandle (_FileHandle=0) returned 0x258 [0125.590] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.591] ReadFile (in: hFile=0x258, lpBuffer=0x7ff7ca669970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x7f8a4ff618, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ca669970*, lpNumberOfBytesRead=0x7f8a4ff618*=0x1, lpOverlapped=0x0) returned 1 [0125.591] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ca669970, cbMultiByte=1, lpWideCharStr=0x7ff7ca673c84, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0125.591] _get_osfhandle (_FileHandle=0) returned 0x258 [0125.591] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.591] ReadFile (in: hFile=0x258, lpBuffer=0x7ff7ca669970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x7f8a4ff618, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ca669970*, lpNumberOfBytesRead=0x7f8a4ff618*=0x1, lpOverlapped=0x0) returned 1 [0125.591] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ca669970, cbMultiByte=1, lpWideCharStr=0x7ff7ca673c86, cchWideChar=1 | out: lpWideCharStr="o") returned 1 [0125.591] _get_osfhandle (_FileHandle=0) returned 0x258 [0125.591] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.591] ReadFile (in: hFile=0x258, lpBuffer=0x7ff7ca669970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x7f8a4ff618, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ca669970*, lpNumberOfBytesRead=0x7f8a4ff618*=0x1, lpOverlapped=0x0) returned 1 [0125.592] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ca669970, cbMultiByte=1, lpWideCharStr=0x7ff7ca673c88, cchWideChar=1 | out: lpWideCharStr="f") returned 1 [0125.592] _get_osfhandle (_FileHandle=0) returned 0x258 [0125.592] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.592] ReadFile (in: hFile=0x258, lpBuffer=0x7ff7ca669970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x7f8a4ff618, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ca669970*, lpNumberOfBytesRead=0x7f8a4ff618*=0x1, lpOverlapped=0x0) returned 1 [0125.592] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ca669970, cbMultiByte=1, lpWideCharStr=0x7ff7ca673c8a, cchWideChar=1 | out: lpWideCharStr="f") returned 1 [0125.592] _get_osfhandle (_FileHandle=0) returned 0x258 [0125.592] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.592] ReadFile (in: hFile=0x258, lpBuffer=0x7ff7ca669970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x7f8a4ff618, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ca669970*, lpNumberOfBytesRead=0x7f8a4ff618*=0x1, lpOverlapped=0x0) returned 1 [0125.592] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ca669970, cbMultiByte=1, lpWideCharStr=0x7ff7ca673c8c, cchWideChar=1 | out: lpWideCharStr="\n") returned 1 [0125.595] _get_osfhandle (_FileHandle=0) returned 0x258 [0125.595] GetFileType (hFile=0x258) returned 0x3 [0125.595] _get_osfhandle (_FileHandle=0) returned 0x258 [0125.596] SetFilePointer (in: hFile=0x258, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.596] _get_osfhandle (_FileHandle=1) returned 0x25c [0125.596] GetFileType (hFile=0x25c) returned 0x3 [0125.596] _get_osfhandle (_FileHandle=1) returned 0x25c [0125.596] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="netsh advfirewall set currentprofile state off\n", cchWideChar=-1, lpMultiByteStr=0x7ff7ca669970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netsh advfirewall set currentprofile state off\n", lpUsedDefaultChar=0x0) returned 48 [0125.596] WriteFile (in: hFile=0x25c, lpBuffer=0x7ff7ca669970*, nNumberOfBytesToWrite=0x2f, lpNumberOfBytesWritten=0x7f8a4ff5b8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ca669970*, lpNumberOfBytesWritten=0x7f8a4ff5b8*=0x2f, lpOverlapped=0x0) returned 1 [0125.596] GetProcessHeap () returned 0x18484280000 [0125.596] RtlAllocateHeap (HeapHandle=0x18484280000, Flags=0x8, Size=0x4012) returned 0x18484288e50 [0125.596] GetProcessHeap () returned 0x18484280000 [0125.596] RtlFreeHeap (HeapHandle=0x18484280000, Flags=0x0, BaseAddress=0x18484288e50) returned 1 [0125.598] _wcsicmp (_String1="netsh", _String2=")") returned 69 [0125.598] _wcsicmp (_String1="FOR", _String2="netsh") returned -8 [0125.598] _wcsicmp (_String1="FOR/?", _String2="netsh") returned -8 [0125.598] _wcsicmp (_String1="IF", _String2="netsh") returned -5 [0125.598] _wcsicmp (_String1="IF/?", _String2="netsh") returned -5 [0125.599] _wcsicmp (_String1="REM", _String2="netsh") returned 4 [0125.599] _wcsicmp (_String1="REM/?", _String2="netsh") returned 4 [0125.599] GetProcessHeap () returned 0x18484280000 [0125.599] RtlAllocateHeap (HeapHandle=0x18484280000, Flags=0x8, Size=0xb0) returned 0x18484286c70 [0125.599] GetProcessHeap () returned 0x18484280000 [0125.599] RtlAllocateHeap (HeapHandle=0x18484280000, Flags=0x8, Size=0x1c) returned 0x18484286ac0 [0125.601] GetProcessHeap () returned 0x18484280000 [0125.601] RtlAllocateHeap (HeapHandle=0x18484280000, Flags=0x8, Size=0x64) returned 0x18484281850 [0125.603] GetConsoleOutputCP () returned 0x1b5 [0126.168] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff7ca66fbb0 | out: lpCPInfo=0x7ff7ca66fbb0) returned 1 [0126.168] SetThreadUILanguage (LangId=0x0) returned 0x409 [0126.950] GetConsoleTitleW (in: lpConsoleTitle=0x7f8a4ff400, nSize=0x104 | out: lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe") returned 0x2b [0130.180] malloc (_Size=0xffce) returned 0x184843a0840 [0130.181] ??_V@YAXPEAX@Z () returned 0x184843a0840 [0130.182] malloc (_Size=0xffce) returned 0x184843b0820 [0130.190] ??_V@YAXPEAX@Z () returned 0x184843b0820 [0130.192] _wcsicmp (_String1="netsh", _String2="DIR") returned 10 [0130.193] _wcsicmp (_String1="netsh", _String2="ERASE") returned 9 [0130.193] _wcsicmp (_String1="netsh", _String2="DEL") returned 10 [0130.193] _wcsicmp (_String1="netsh", _String2="TYPE") returned -6 [0130.193] _wcsicmp (_String1="netsh", _String2="COPY") returned 11 [0130.193] _wcsicmp (_String1="netsh", _String2="CD") returned 11 [0130.193] _wcsicmp (_String1="netsh", _String2="CHDIR") returned 11 [0130.193] _wcsicmp (_String1="netsh", _String2="RENAME") returned -4 [0130.193] _wcsicmp (_String1="netsh", _String2="REN") returned -4 [0130.193] _wcsicmp (_String1="netsh", _String2="ECHO") returned 9 [0130.193] _wcsicmp (_String1="netsh", _String2="SET") returned -5 [0130.193] _wcsicmp (_String1="netsh", _String2="PAUSE") returned -2 [0130.193] _wcsicmp (_String1="netsh", _String2="DATE") returned 10 [0130.193] _wcsicmp (_String1="netsh", _String2="TIME") returned -6 [0130.193] _wcsicmp (_String1="netsh", _String2="PROMPT") returned -2 [0130.193] _wcsicmp (_String1="netsh", _String2="MD") returned 1 [0130.194] _wcsicmp (_String1="netsh", _String2="MKDIR") returned 1 [0130.194] _wcsicmp (_String1="netsh", _String2="RD") returned -4 [0130.194] _wcsicmp (_String1="netsh", _String2="RMDIR") returned -4 [0130.194] _wcsicmp (_String1="netsh", _String2="PATH") returned -2 [0130.194] _wcsicmp (_String1="netsh", _String2="GOTO") returned 7 [0130.194] _wcsicmp (_String1="netsh", _String2="SHIFT") returned -5 [0130.194] _wcsicmp (_String1="netsh", _String2="CLS") returned 11 [0130.194] _wcsicmp (_String1="netsh", _String2="CALL") returned 11 [0130.194] _wcsicmp (_String1="netsh", _String2="VERIFY") returned -8 [0130.194] _wcsicmp (_String1="netsh", _String2="VER") returned -8 [0130.194] _wcsicmp (_String1="netsh", _String2="VOL") returned -8 [0130.194] _wcsicmp (_String1="netsh", _String2="EXIT") returned 9 [0130.194] _wcsicmp (_String1="netsh", _String2="SETLOCAL") returned -5 [0130.194] _wcsicmp (_String1="netsh", _String2="ENDLOCAL") returned 9 [0130.194] _wcsicmp (_String1="netsh", _String2="TITLE") returned -6 [0130.195] _wcsicmp (_String1="netsh", _String2="START") returned -5 [0130.195] _wcsicmp (_String1="netsh", _String2="DPATH") returned 10 [0130.195] _wcsicmp (_String1="netsh", _String2="KEYS") returned 3 [0130.195] _wcsicmp (_String1="netsh", _String2="MOVE") returned 1 [0130.195] _wcsicmp (_String1="netsh", _String2="PUSHD") returned -2 [0130.195] _wcsicmp (_String1="netsh", _String2="POPD") returned -2 [0130.195] _wcsicmp (_String1="netsh", _String2="ASSOC") returned 13 [0130.195] _wcsicmp (_String1="netsh", _String2="FTYPE") returned 8 [0130.195] _wcsicmp (_String1="netsh", _String2="BREAK") returned 12 [0130.195] _wcsicmp (_String1="netsh", _String2="COLOR") returned 11 [0130.195] _wcsicmp (_String1="netsh", _String2="MKLINK") returned 1 [0130.195] _wcsicmp (_String1="netsh", _String2="DIR") returned 10 [0130.195] _wcsicmp (_String1="netsh", _String2="ERASE") returned 9 [0130.195] _wcsicmp (_String1="netsh", _String2="DEL") returned 10 [0130.195] _wcsicmp (_String1="netsh", _String2="TYPE") returned -6 [0130.196] _wcsicmp (_String1="netsh", _String2="COPY") returned 11 [0130.196] _wcsicmp (_String1="netsh", _String2="CD") returned 11 [0130.196] _wcsicmp (_String1="netsh", _String2="CHDIR") returned 11 [0130.196] _wcsicmp (_String1="netsh", _String2="RENAME") returned -4 [0130.196] _wcsicmp (_String1="netsh", _String2="REN") returned -4 [0130.196] _wcsicmp (_String1="netsh", _String2="ECHO") returned 9 [0130.196] _wcsicmp (_String1="netsh", _String2="SET") returned -5 [0130.196] _wcsicmp (_String1="netsh", _String2="PAUSE") returned -2 [0130.196] _wcsicmp (_String1="netsh", _String2="DATE") returned 10 [0130.196] _wcsicmp (_String1="netsh", _String2="TIME") returned -6 [0130.196] _wcsicmp (_String1="netsh", _String2="PROMPT") returned -2 [0130.196] _wcsicmp (_String1="netsh", _String2="MD") returned 1 [0130.196] _wcsicmp (_String1="netsh", _String2="MKDIR") returned 1 [0130.196] _wcsicmp (_String1="netsh", _String2="RD") returned -4 [0130.196] _wcsicmp (_String1="netsh", _String2="RMDIR") returned -4 [0130.196] _wcsicmp (_String1="netsh", _String2="PATH") returned -2 [0130.197] _wcsicmp (_String1="netsh", _String2="GOTO") returned 7 [0130.197] _wcsicmp (_String1="netsh", _String2="SHIFT") returned -5 [0130.197] _wcsicmp (_String1="netsh", _String2="CLS") returned 11 [0130.197] _wcsicmp (_String1="netsh", _String2="CALL") returned 11 [0130.197] _wcsicmp (_String1="netsh", _String2="VERIFY") returned -8 [0130.197] _wcsicmp (_String1="netsh", _String2="VER") returned -8 [0130.197] _wcsicmp (_String1="netsh", _String2="VOL") returned -8 [0130.197] _wcsicmp (_String1="netsh", _String2="EXIT") returned 9 [0130.197] _wcsicmp (_String1="netsh", _String2="SETLOCAL") returned -5 [0130.197] _wcsicmp (_String1="netsh", _String2="ENDLOCAL") returned 9 [0130.197] _wcsicmp (_String1="netsh", _String2="TITLE") returned -6 [0130.197] _wcsicmp (_String1="netsh", _String2="START") returned -5 [0130.197] _wcsicmp (_String1="netsh", _String2="DPATH") returned 10 [0130.197] _wcsicmp (_String1="netsh", _String2="KEYS") returned 3 [0130.197] _wcsicmp (_String1="netsh", _String2="MOVE") returned 1 [0130.197] _wcsicmp (_String1="netsh", _String2="PUSHD") returned -2 [0130.198] _wcsicmp (_String1="netsh", _String2="POPD") returned -2 [0130.198] _wcsicmp (_String1="netsh", _String2="ASSOC") returned 13 [0130.198] _wcsicmp (_String1="netsh", _String2="FTYPE") returned 8 [0130.198] _wcsicmp (_String1="netsh", _String2="BREAK") returned 12 [0130.198] _wcsicmp (_String1="netsh", _String2="COLOR") returned 11 [0130.198] _wcsicmp (_String1="netsh", _String2="MKLINK") returned 1 [0130.198] _wcsicmp (_String1="netsh", _String2="FOR") returned 8 [0130.198] _wcsicmp (_String1="netsh", _String2="IF") returned 5 [0130.198] _wcsicmp (_String1="netsh", _String2="REM") returned -4 [0130.206] ??_V@YAXPEAX@Z () returned 0x1 [0130.206] GetProcessHeap () returned 0x18484280000 [0130.206] RtlAllocateHeap (HeapHandle=0x18484280000, Flags=0x8, Size=0xffde) returned 0x18484288e50 [0130.208] GetProcessHeap () returned 0x18484280000 [0130.208] RtlAllocateHeap (HeapHandle=0x18484280000, Flags=0x8, Size=0x70) returned 0x18484286d30 [0130.209] _wcsnicmp (_String1="nets", _String2="cmd ", _MaxCount=0x4) returned 11 [0130.209] malloc (_Size=0xffce) returned 0x184843b0820 [0130.209] ??_V@YAXPEAX@Z () returned 0x184843b0820 [0130.209] GetProcessHeap () returned 0x18484280000 [0130.209] RtlAllocateHeap (HeapHandle=0x18484280000, Flags=0x8, Size=0x1ffac) returned 0x18484298e40 [0130.218] SetErrorMode (uMode=0x0) returned 0x0 [0130.218] SetErrorMode (uMode=0x1) returned 0x0 [0130.218] GetFullPathNameW (in: lpFileName=".", nBufferLength=0xffce, lpBuffer=0x18484298e50, lpFilePart=0x7f8a4fec80 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x7f8a4fec80*="Desktop") returned 0x17 [0130.219] SetErrorMode (uMode=0x0) returned 0x1 [0130.219] GetProcessHeap () returned 0x18484280000 [0130.219] RtlReAllocateHeap (Heap=0x18484280000, Flags=0x0, Ptr=0x18484298e40, Size=0x4c) returned 0x18484298e40 [0130.219] GetProcessHeap () returned 0x18484280000 [0130.219] RtlSizeHeap (HeapHandle=0x18484280000, Flags=0x0, MemoryPointer=0x18484298e40) returned 0x4c [0130.219] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x7ff7ca66bb90, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0130.220] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0130.220] GetProcessHeap () returned 0x18484280000 [0130.220] RtlAllocateHeap (HeapHandle=0x18484280000, Flags=0x8, Size=0x1bc) returned 0x18484286db0 [0130.220] GetProcessHeap () returned 0x18484280000 [0130.220] RtlAllocateHeap (HeapHandle=0x18484280000, Flags=0x8, Size=0x368) returned 0x18484298ea0 [0130.726] GetProcessHeap () returned 0x18484280000 [0130.726] RtlReAllocateHeap (Heap=0x18484280000, Flags=0x0, Ptr=0x18484298ea0, Size=0x1be) returned 0x18484298ea0 [0130.726] GetProcessHeap () returned 0x18484280000 [0130.726] RtlSizeHeap (HeapHandle=0x18484280000, Flags=0x0, MemoryPointer=0x18484298ea0) returned 0x1be [0130.726] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff7ca66bb90, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0130.726] GetProcessHeap () returned 0x18484280000 [0130.727] RtlAllocateHeap (HeapHandle=0x18484280000, Flags=0x8, Size=0xe8) returned 0x18484299070 [0130.732] GetProcessHeap () returned 0x18484280000 [0130.732] RtlReAllocateHeap (Heap=0x18484280000, Flags=0x0, Ptr=0x18484299070, Size=0x7e) returned 0x18484299070 [0130.732] GetProcessHeap () returned 0x18484280000 [0130.732] RtlSizeHeap (HeapHandle=0x18484280000, Flags=0x0, MemoryPointer=0x18484299070) returned 0x7e [0130.733] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0130.733] FindFirstFileExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\netsh.*", fInfoLevelId=0x1, lpFindFileData=0x7f8a4fe9f0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x7f8a4fe9f0) returned 0xffffffffffffffff [0130.735] GetLastError () returned 0x2 [0130.735] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0130.735] FindFirstFileExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\netsh.*", fInfoLevelId=0x1, lpFindFileData=0x7f8a4fe9f0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x7f8a4fe9f0) returned 0xffffffffffffffff [0130.743] GetLastError () returned 0x2 [0130.744] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0130.744] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\netsh.*", fInfoLevelId=0x1, lpFindFileData=0x7f8a4fe9f0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x7f8a4fe9f0) returned 0x18484299100 [0130.744] GetProcessHeap () returned 0x18484280000 [0130.744] RtlAllocateHeap (HeapHandle=0x18484280000, Flags=0x0, Size=0x28) returned 0x18484286f80 [0130.745] FindClose (in: hFindFile=0x18484299100 | out: hFindFile=0x18484299100) returned 1 [0130.745] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\netsh.COM", fInfoLevelId=0x1, lpFindFileData=0x7f8a4fe9f0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x7f8a4fe9f0) returned 0xffffffffffffffff [0130.745] GetLastError () returned 0x2 [0130.745] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\netsh.EXE", fInfoLevelId=0x1, lpFindFileData=0x7f8a4fe9f0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x7f8a4fe9f0) returned 0x18484299100 [0131.041] GetProcessHeap () returned 0x18484280000 [0131.041] RtlReAllocateHeap (Heap=0x18484280000, Flags=0x0, Ptr=0x18484286f80, Size=0x8) returned 0x18484286f80 [0131.042] FindClose (in: hFindFile=0x18484299100 | out: hFindFile=0x18484299100) returned 1 [0131.042] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3 [0131.042] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2 [0131.042] ??_V@YAXPEAX@Z () returned 0x1 [0131.042] GetConsoleTitleW (in: lpConsoleTitle=0x7f8a4fef70, nSize=0x104 | out: lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe") returned 0x2b [0132.178] GetProcessHeap () returned 0x18484280000 [0132.178] RtlAllocateHeap (HeapHandle=0x18484280000, Flags=0x8, Size=0x21c) returned 0x18484299100 [0132.178] GetConsoleTitleW (in: lpConsoleTitle=0x18484299110, nSize=0x104 | out: lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe") returned 0x2b [0133.427] GetProcessHeap () returned 0x18484280000 [0133.427] RtlReAllocateHeap (Heap=0x18484280000, Flags=0x0, Ptr=0x18484299100, Size=0xd8) returned 0x18484299100 [0133.428] GetProcessHeap () returned 0x18484280000 [0133.428] RtlSizeHeap (HeapHandle=0x18484280000, Flags=0x0, MemoryPointer=0x18484299100) returned 0xd8 [0133.428] SetConsoleTitleW (lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe - netsh advfirewall set currentprofile state off") returned 1 [0134.106] GetProcessHeap () returned 0x18484280000 [0134.106] RtlFreeHeap (HeapHandle=0x18484280000, Flags=0x0, BaseAddress=0x18484299100) returned 1 [0134.106] InitializeProcThreadAttributeList (in: lpAttributeList=0x7f8a4fee90, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x7f8a4fed80 | out: lpAttributeList=0x7f8a4fee90, lpSize=0x7f8a4fed80) returned 1 [0134.107] UpdateProcThreadAttribute (in: lpAttributeList=0x7f8a4fee90, dwFlags=0x0, Attribute=0x60001, lpValue=0x7f8a4fed6c, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x7f8a4fee90, lpPreviousValue=0x0) returned 1 [0134.107] GetStartupInfoW (in: lpStartupInfo=0x7f8a4fee20 | out: lpStartupInfo=0x7f8a4fee20*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\WINDOWS\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x258, hStdOutput=0x25c, hStdError=0x25c)) [0134.107] GetProcessHeap () returned 0x18484280000 [0134.107] RtlAllocateHeap (HeapHandle=0x18484280000, Flags=0x8, Size=0x20) returned 0x18484299100 [0134.108] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0134.108] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0134.108] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0134.108] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0134.108] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0134.108] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0134.108] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0134.108] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0134.108] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0134.108] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0134.108] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0134.108] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0134.109] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0134.109] _wcsnicmp (_String1="COPYCMD", _String2="OneDriv", _MaxCount=0x7) returned -12 [0134.109] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0134.109] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0134.109] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0134.109] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0134.109] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0134.109] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0134.109] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0134.109] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0134.109] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0134.109] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0134.109] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0134.109] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0134.109] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0134.110] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0134.110] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0134.110] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0134.110] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0134.110] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0134.110] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0134.110] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0134.110] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0134.110] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0134.110] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0134.110] GetProcessHeap () returned 0x18484280000 [0134.110] RtlFreeHeap (HeapHandle=0x18484280000, Flags=0x0, BaseAddress=0x18484299100) returned 1 [0134.110] GetProcessHeap () returned 0x18484280000 [0134.110] RtlAllocateHeap (HeapHandle=0x18484280000, Flags=0x8, Size=0x12) returned 0x18484286fb0 [0134.110] _get_osfhandle (_FileHandle=1) returned 0x25c [0134.111] SetConsoleMode (hConsoleHandle=0x25c, dwMode=0x0) returned 0 [0134.111] _get_osfhandle (_FileHandle=0) returned 0x258 [0134.111] SetConsoleMode (hConsoleHandle=0x258, dwMode=0x0) returned 0 [0134.111] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\netsh.exe", lpCommandLine="netsh advfirewall set currentprofile state off", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\FD1HVy\\Desktop", lpStartupInfo=0x7f8a4fedb0*(cb=0x70, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="netsh advfirewall set currentprofile state off", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x7f8a4fed88 | out: lpCommandLine="netsh advfirewall set currentprofile state off", lpProcessInformation=0x7f8a4fed88*(hProcess=0x98, hThread=0x94, dwProcessId=0x9e0, dwThreadId=0x704)) returned 1 [0134.899] CloseHandle (hObject=0x94) returned 1 [0134.900] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0134.900] GetProcessHeap () returned 0x18484280000 [0134.900] RtlFreeHeap (HeapHandle=0x18484280000, Flags=0x0, BaseAddress=0x18484287a60) returned 1 [0134.900] GetEnvironmentStringsW () returned 0x18484287a60* [0134.900] GetProcessHeap () returned 0x18484280000 [0134.900] RtlAllocateHeap (HeapHandle=0x18484280000, Flags=0x8, Size=0xacc) returned 0x18484299500 [0134.900] FreeEnvironmentStringsA (penv="=") returned 1 [0134.901] LoadLibraryExW (lpLibFileName="NTDLL.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ff931f40000 [0134.901] GetProcAddress (hModule=0x7ff931f40000, lpProcName="NtQueryInformationProcess") returned 0x7ff931fe56b0 [0134.901] NtQueryInformationProcess (in: ProcessHandle=0x98, ProcessInformationClass=0x0, ProcessInformation=0x7f8a4fe288, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x7f8a4fe288, ReturnLength=0x0) returned 0x0 [0134.901] ReadProcessMemory (in: hProcess=0x98, lpBaseAddress=0xe9a6a9a000, lpBuffer=0x7f8a4fe2c0, nSize=0x7a0, lpNumberOfBytesRead=0x7f8a4fe280 | out: lpBuffer=0x7f8a4fe2c0*, lpNumberOfBytesRead=0x7f8a4fe280*=0x7a0) returned 1 [0134.906] WaitForSingleObject (hHandle=0x98, dwMilliseconds=0xffffffff) Thread: id = 29 os_tid = 0xfa4 Process: id = "4" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x692a9000" os_pid = "0x840" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0xdc4" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "64" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103c1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 13 os_tid = 0xaec Thread: id = 14 os_tid = 0xedc Thread: id = 15 os_tid = 0xca0 Thread: id = 27 os_tid = 0xeb0 Thread: id = 28 os_tid = 0xe0c Process: id = "5" image_name = "netsh.exe" filename = "c:\\windows\\system32\\netsh.exe" page_root = "0x67e77000" os_pid = "0x9e0" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0xdc4" cmd_line = "netsh advfirewall set currentprofile state off" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "64" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103c1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 32 os_tid = 0x704